{"vulnerability": "2026-47", "sightings": [{"uuid": "debce08a-2322-497a-abd7-218527248a0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4702", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "c994a9e5-c72c-4c1c-a573-b87f63b26370", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4758", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhwfp2iqwd2s", "content": "", "creation_timestamp": "2026-03-26T01:00:46.055525Z"}, {"uuid": "64b19e7a-2f7b-41e9-8206-be1213a3363f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4707", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "47554f67-d7ed-4ad1-8f4b-3c8b086132e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4719", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "f92d7ec3-077e-4fa1-8a22-5a29a2b1e127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4758", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhwgjfmkf22n", "content": "", "creation_timestamp": "2026-03-26T01:15:29.540033Z"}, {"uuid": "daa2ad0c-6425-43b4-af6c-0577762360ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4775", "type": "seen", "source": "https://access.redhat.com/security/cve/CVE-2026-4775", "content": "", "creation_timestamp": "2026-03-25T03:00:12.000000Z"}, {"uuid": "fd6dcd10-ab49-416b-8afc-02d0ee81a18f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4701", "type": "seen", "source": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-20/", "content": "", "creation_timestamp": "2026-03-25T03:00:13.000000Z"}, {"uuid": "ba4174d1-8b0d-4125-98a0-94d6e2f33af9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4700", "type": "seen", "source": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-20/", "content": "", "creation_timestamp": "2026-03-25T03:00:13.000000Z"}, {"uuid": "0368d569-c23a-41d9-9be4-87371473fc89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4754", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhsd6nyubb2g", "content": "", "creation_timestamp": "2026-03-24T10:05:08.887034Z"}, {"uuid": "824bceca-a91d-4e20-be82-b8e6d5f6861e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116299991083030889", "content": "", "creation_timestamp": "2026-03-27T07:37:12.978089Z"}, {"uuid": "103ac0a8-a68b-4821-9cc4-9de8b03e7ecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4756", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhsdfewzse2g", "content": "", "creation_timestamp": "2026-03-24T10:08:54.345209Z"}, {"uuid": "c7b9d775-6861-44f9-b6c0-958a57599a66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4755", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhsdvywxf524", "content": "", "creation_timestamp": "2026-03-24T10:18:12.095421Z"}, {"uuid": "ef1ff1a4-e3e9-4eb3-8fda-56ce4101a757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4739", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116283685757971538", "content": "", "creation_timestamp": "2026-03-24T10:30:33.211258Z"}, {"uuid": "a78258f5-3278-4037-a002-64b1e83cf259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4739", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mhsem4v3rk25", "content": "", "creation_timestamp": "2026-03-24T10:30:35.074663Z"}, {"uuid": "ca569b1e-24d3-4879-9134-b2b9a8dfd0f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4734", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4734", "content": "", "creation_timestamp": "2026-03-24T03:17:25.000000Z"}, {"uuid": "8f0eba9c-ea1e-462a-a0d0-8b6a1821ed38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4725", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mhuypdfvmj2r", "content": "", "creation_timestamp": "2026-03-25T11:35:36.612727Z"}, {"uuid": "c70c8aad-92f7-4fcc-b552-6afd3a4f9614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4755", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mhy6czud5i2h", "content": "", "creation_timestamp": "2026-03-26T17:54:06.048975Z"}, {"uuid": "c559e2f7-4934-4d5f-832e-4b1b7d63eef4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4775", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhto45lnmg2m", "content": "", "creation_timestamp": "2026-03-24T22:53:15.892802Z"}, {"uuid": "a71ef2ca-dd63-44f9-8068-bc8d080919d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4722", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtrujmedm2d", "content": "", "creation_timestamp": "2026-03-25T00:00:35.032006Z"}, {"uuid": "7489d51b-0e4e-412f-beb3-5b2335a45c83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4723", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtruqyd4p2s", "content": "", "creation_timestamp": "2026-03-25T00:00:42.868792Z"}, {"uuid": "445b3d7e-8a3b-4fe8-aef5-493d3e96925f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4725", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtruy3wcn2p", "content": "", "creation_timestamp": "2026-03-25T00:00:50.171361Z"}, {"uuid": "7da39a64-e763-45ee-ab43-5c134470411e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4711", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtrvceuox2s", "content": "", "creation_timestamp": "2026-03-25T00:01:01.272059Z"}, {"uuid": "22e5f38e-fa9b-4e19-8d84-6af548e20100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4712", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtrvis33k27", "content": "", "creation_timestamp": "2026-03-25T00:01:07.804341Z"}, {"uuid": "05edebc9-88e7-4d41-b5eb-c7cc0d9eae85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4713", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtrvp7lay2r", "content": "", "creation_timestamp": "2026-03-25T00:01:14.539802Z"}, {"uuid": "402cb23d-452f-449f-9855-cd5a3f9f32ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4755", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhyfemjzfq2v", "content": "", "creation_timestamp": "2026-03-26T20:00:14.787718Z"}, {"uuid": "f738ba65-707e-46a0-8f10-14283e19e6f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4714", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtv7lkdj22m", "content": "", "creation_timestamp": "2026-03-25T01:00:27.462836Z"}, {"uuid": "e24f9f33-30a7-4146-9e09-ead55a62631a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4715", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtv7tbtgd27", "content": "", "creation_timestamp": "2026-03-25T01:00:35.557013Z"}, {"uuid": "c847ba69-6614-4061-81f8-c80992fae357", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4716", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtva2knmm2r", "content": "", "creation_timestamp": "2026-03-25T01:00:43.485300Z"}, {"uuid": "d3fff99c-8a9e-4bc3-8783-e1f870430a84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4716", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtvafbhdx2x", "content": "", "creation_timestamp": "2026-03-25T01:00:54.267852Z"}, {"uuid": "03204df4-949c-4530-b705-d5d9a5dd9aa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4717", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtvamn6d22m", "content": "", "creation_timestamp": "2026-03-25T01:01:03.642817Z"}, {"uuid": "0fcfcef6-a613-42f1-9288-502817fa9e11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4719", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtvau2g4m2p", "content": "", "creation_timestamp": "2026-03-25T01:01:10.335630Z"}, {"uuid": "7cce2891-261e-4413-8ef3-8f66a2ace5e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4716", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtw5rqakf2r", "content": "", "creation_timestamp": "2026-03-25T01:17:20.745355Z"}, {"uuid": "e2d2798c-a124-4b47-8097-9da631c0b78a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4700", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtw5zg7n42c", "content": "", "creation_timestamp": "2026-03-25T01:17:28.779157Z"}, {"uuid": "89e46755-ae21-4501-b051-295c7210f688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4701", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtw6b4fl72h", "content": "", "creation_timestamp": "2026-03-25T01:17:37.374951Z"}, {"uuid": "daf1245a-308d-45f8-819e-efb91760c851", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4702", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtxf4z7iv2d", "content": "", "creation_timestamp": "2026-03-25T01:39:21.438522Z"}, {"uuid": "679eb8f7-e38e-4466-add7-e7064b19d128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4760", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhve3apqeo2j", "content": "", "creation_timestamp": "2026-03-25T14:59:07.336022Z"}, {"uuid": "a34dcd78-ea17-49c2-8675-c58472e0982b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4704", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtxfdmgbk2w", "content": "", "creation_timestamp": "2026-03-25T01:39:27.867863Z"}, {"uuid": "f14960fe-d288-4757-9005-4904fbfec009", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4705", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtxfktpnj27", "content": "", "creation_timestamp": "2026-03-25T01:39:35.554502Z"}, {"uuid": "4b867456-5233-4330-8798-1ab03b9f9925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4761", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhvee7ea2p2s", "content": "", "creation_timestamp": "2026-03-25T15:04:07.918027Z"}, {"uuid": "eac40da6-fba8-45d2-b575-1b7ef2f362da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4756", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhyhlyk7rj27", "content": "", "creation_timestamp": "2026-03-26T20:40:09.535792Z"}, {"uuid": "fd5f81ee-d659-4a25-a33b-d75dfb063005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4766", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhtyjfe2fv2s", "content": "", "creation_timestamp": "2026-03-25T01:59:37.198856Z"}, {"uuid": "c5d67802-9bad-494e-9ddf-62aab211b754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mi2ij54vyq2f", "content": "", "creation_timestamp": "2026-03-27T16:01:47.088649Z"}, {"uuid": "ed662f8c-2d16-41bd-bd75-ae261e84142f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4783", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhu3lh6wrp2j", "content": "", "creation_timestamp": "2026-03-25T02:54:27.598556Z"}, {"uuid": "b22b24ab-1ce7-4d24-bef3-7893abcec1ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/freebsd-security-advisory-av26-291", "content": "", "creation_timestamp": "2026-03-27T13:50:17.000000Z"}, {"uuid": "6ff3736b-0143-4598-9843-ab367574eb8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4748", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/freebsd-security-advisory-av26-291", "content": "", "creation_timestamp": "2026-03-27T13:50:17.000000Z"}, {"uuid": "d7bda16d-164d-41de-ab98-b528d123c6e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4700", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mhu7d27mlw2r", "content": "", "creation_timestamp": "2026-03-25T04:01:21.463077Z"}, {"uuid": "073199b1-8a6a-4ea9-bbdf-427f298fb411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4701", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mhu7d27mlw2r", "content": "", "creation_timestamp": "2026-03-25T04:01:21.652182Z"}, {"uuid": "511df8e7-23b4-45b7-b6ac-c0d6655caaba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4702", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mhu7d3b6sc2j", "content": "", "creation_timestamp": "2026-03-25T04:01:23.233899Z"}, {"uuid": "a0389d5b-7699-4009-81ed-c0a98c584cb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4706", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mhu7d3b6sc2j", "content": "", "creation_timestamp": "2026-03-25T04:01:23.575022Z"}, {"uuid": "16745508-d518-4ea1-a178-e7ebcf669c5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4704", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mhu7d3b6sc2j", "content": "", "creation_timestamp": "2026-03-25T04:01:23.338160Z"}, {"uuid": "7c363f11-e0b3-49e7-8e2b-252122bba06c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4707", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mhu7d3b6sc2j", "content": "", "creation_timestamp": "2026-03-25T04:01:23.670251Z"}, {"uuid": "60b05468-a076-4eee-a3c4-961c53cc2675", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4705", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mhvnonqirn2u", "content": "", "creation_timestamp": "2026-03-25T17:51:04.253811Z"}, {"uuid": "bc9ec968-4860-4d5b-b51f-5aaeda276cd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4705", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mhu7d3b6sc2j", "content": "", "creation_timestamp": "2026-03-25T04:01:23.479895Z"}, {"uuid": "0d30afff-27d5-4124-ae29-4bbb7cf06d14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4708", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mhu7d4cn4y23", "content": "", "creation_timestamp": "2026-03-25T04:01:24.248806Z"}, {"uuid": "ca13a491-9a25-48d7-b634-457587323abd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4709", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mhu7d4cn4y23", "content": "", "creation_timestamp": "2026-03-25T04:01:24.380622Z"}, {"uuid": "c85d7c58-f099-4f3f-81a3-d7b8bd1f31f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4710", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mhu7d4cn4y23", "content": "", "creation_timestamp": "2026-03-25T04:01:24.561777Z"}, {"uuid": "d93575e7-385d-49f8-a34f-ed2eca2f5b16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4711", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mhu7d4cn4y23", "content": "", "creation_timestamp": "2026-03-25T04:01:24.662859Z"}, {"uuid": "00518a98-1cb7-4991-a306-92668e3ffc0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4712", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mhu7d4cn4y23", "content": "", "creation_timestamp": "2026-03-25T04:01:24.765071Z"}, {"uuid": "fb182b25-76c8-441a-b137-bc0888e0b57f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4713", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mhu7d5fxxt2w", "content": "", "creation_timestamp": "2026-03-25T04:01:25.621523Z"}, {"uuid": "132a361c-4fed-42ad-af16-f9ad43cfa48e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4716", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mhu7d5fxxt2w", "content": "", "creation_timestamp": "2026-03-25T04:01:25.901942Z"}, {"uuid": "da23d53d-fc4d-45ee-8b53-b8747c721440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4744", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116282270051137305", "content": "", "creation_timestamp": "2026-03-24T04:30:31.271188Z"}, {"uuid": "8df08759-e3e6-440e-b890-b72c4459bd23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4714", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mhu7d5fxxt2w", "content": "", "creation_timestamp": "2026-03-25T04:01:25.718620Z"}, {"uuid": "bec53283-d60c-47ab-ba1f-ac0f739d81e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4717", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mhu7d5fxxt2w", "content": "", "creation_timestamp": "2026-03-25T04:01:26.039598Z"}, {"uuid": "05c22057-813e-44b1-a470-ec504637fa46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4744", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mhrqidnacm2i", "content": "", "creation_timestamp": "2026-03-24T04:30:33.095176Z"}, {"uuid": "f4196400-43e2-4e99-ad9f-0d9f5aa47eb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4715", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mhu7d5fxxt2w", "content": "", "creation_timestamp": "2026-03-25T04:01:25.806923Z"}, {"uuid": "f61d0788-abf4-4013-be5f-8a96751c1b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4718", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mhu7d6hbhv2w", "content": "", "creation_timestamp": "2026-03-25T04:01:27.583836Z"}, {"uuid": "d2882881-ade8-44d2-851b-4838266f941f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4720", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mhu7d6hbhv2w", "content": "", "creation_timestamp": "2026-03-25T04:01:27.991004Z"}, {"uuid": "5f9033f3-4025-4601-96a0-520adbf54816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4719", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mhu7d6hbhv2w", "content": "", "creation_timestamp": "2026-03-25T04:01:27.845921Z"}, {"uuid": "b6c69c54-21d3-4971-9216-db9e11d62f26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4721", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mhu7d6hbhv2w", "content": "", "creation_timestamp": "2026-03-25T04:01:28.142388Z"}, {"uuid": "09efad52-a2d8-40ed-93ac-4c006b56be97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4784", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mhuc2lu7hc26", "content": "", "creation_timestamp": "2026-03-25T04:50:18.437417Z"}, {"uuid": "ca08b5a5-43e7-4fd2-8f9c-c0b5b2cdc7eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116294420808646049", "content": "", "creation_timestamp": "2026-03-26T08:00:36.720952Z"}, {"uuid": "5a063fef-f9f2-44a1-97e3-be78e0845ac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhxb73ufil23", "content": "", "creation_timestamp": "2026-03-26T09:12:54.950023Z"}, {"uuid": "873035ae-4e5c-4901-9950-4016eb8d9c46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4746", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116282623934878762", "content": "", "creation_timestamp": "2026-03-24T06:00:31.496974Z"}, {"uuid": "b186a72d-b28a-4420-ae84-da00aea63cfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4746", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mhrvjbg2wq2i", "content": "", "creation_timestamp": "2026-03-24T06:00:33.251131Z"}, {"uuid": "0775ca5b-2caf-4559-82ed-5f1a5213a4c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4750", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrwskl5b32l", "content": "", "creation_timestamp": "2026-03-24T06:23:38.275809Z"}, {"uuid": "4e2415bc-1dfc-4571-9511-b185d008982e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4753", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrwsrriex2c", "content": "", "creation_timestamp": "2026-03-24T06:23:45.744203Z"}, {"uuid": "62b8dd48-4a7b-419c-80ec-85a6e587e9de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4731", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhrxptxwy62f", "content": "", "creation_timestamp": "2026-03-24T06:40:01.468031Z"}, {"uuid": "355b36ff-5016-45eb-9e38-3674f73b22e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhystq4sks2r", "content": "", "creation_timestamp": "2026-03-27T00:01:20.885766Z"}, {"uuid": "f744e69c-5212-4b49-864a-b6ab06fb5a5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4746", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhrxvocxdi24", "content": "", "creation_timestamp": "2026-03-24T06:43:16.885400Z"}, {"uuid": "87c142bc-cf02-4121-8705-70928fdaa8e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4732", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhrxyto5pk2r", "content": "", "creation_timestamp": "2026-03-24T06:45:05.486941Z"}, {"uuid": "2113eff7-7dae-4a35-88ed-4c8e2a873a54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhysui5gj62x", "content": "", "creation_timestamp": "2026-03-27T00:01:46.551639Z"}, {"uuid": "62d5c703-fd44-4184-8237-16bdc98de0b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4745", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhry7uvyye2f", "content": "", "creation_timestamp": "2026-03-24T06:48:58.611023Z"}, {"uuid": "7a1ef1c6-f255-4a5e-99cf-889730a7f32a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4734", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhrydpuo642f", "content": "", "creation_timestamp": "2026-03-24T06:51:07.535032Z"}, {"uuid": "5e0e342d-c34e-4169-9079-c3570d9572e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4735", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhryhuaoyn2r", "content": "", "creation_timestamp": "2026-03-24T06:53:26.775217Z"}, {"uuid": "a2154616-0949-490d-bae5-2a01d96c6d8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4741", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhrymdoqpb2p", "content": "", "creation_timestamp": "2026-03-24T06:55:56.797985Z"}, {"uuid": "65089442-9947-4945-b309-06613406f268", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4739", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhrz4l5yyl2d", "content": "", "creation_timestamp": "2026-03-24T07:05:01.544383Z"}, {"uuid": "523850a8-83dd-40e2-88e2-bf4fb7d4ea0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4744", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhrzdc4t5c2g", "content": "", "creation_timestamp": "2026-03-24T07:08:46.834878Z"}, {"uuid": "1622f46f-3e98-4381-b440-aebb8cd8d51d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4755", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrzrjfvsk27", "content": "", "creation_timestamp": "2026-03-24T07:16:44.821718Z"}, {"uuid": "a7537923-22c4-46b8-8beb-b3a9d3893078", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4738", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhrztxgbz72x", "content": "", "creation_timestamp": "2026-03-24T07:18:06.916956Z"}, {"uuid": "ad7764d4-071c-43d4-8ed8-f58c82e5ead5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4750", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhs24vtezn24", "content": "", "creation_timestamp": "2026-03-24T07:23:06.509258Z"}, {"uuid": "740b1685-ccbc-4a02-b595-75233a7f7adf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4755", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116282977621312105", "content": "", "creation_timestamp": "2026-03-24T07:30:28.191911Z"}, {"uuid": "02c1a1f2-82da-484d-b086-4ccdd121071d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4755", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mhs2k43txy2v", "content": "", "creation_timestamp": "2026-03-24T07:30:30.192556Z"}, {"uuid": "c70c8757-1692-4922-8301-b6f6fbe3ce18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4753", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhs2osrnei2n", "content": "", "creation_timestamp": "2026-03-24T07:33:07.420275Z"}, {"uuid": "ba371224-db4d-4104-9d51-c4d7c9851abc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4784", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhugsba5gl25", "content": "", "creation_timestamp": "2026-03-25T06:15:07.399900Z"}, {"uuid": "be55baac-9f58-4d0a-9cc4-f355842ef446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4749", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhs2zkqqvh2i", "content": "", "creation_timestamp": "2026-03-24T07:39:07.963206Z"}, {"uuid": "20c9fe34-125d-4270-bf1b-c70494c28c27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4701", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "66d8a12e-4afc-4b43-8eda-eb71cb5a4802", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4700", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "f71e36fa-40f0-44c8-8351-04b5ed66cc9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4789", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3micukst6qp2i", "content": "", "creation_timestamp": "2026-03-30T23:58:46.019154Z"}, {"uuid": "dd20a9e6-a2bc-4ff3-9bab-debf99f635ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4745", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116283331651758120", "content": "", "creation_timestamp": "2026-03-24T09:00:30.767426Z"}, {"uuid": "b021c96a-dd66-4f6c-b9b1-7686c3932d5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4745", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mhs7l3xvvk2e", "content": "", "creation_timestamp": "2026-03-24T09:00:31.746031Z"}, {"uuid": "a65616a5-3fec-4dc2-a96e-e39c764a9c16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4735", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4735", "content": "", "creation_timestamp": "2026-03-24T03:17:26.000000Z"}, {"uuid": "62189e0c-a289-466c-87a5-2704a325866e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4736", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4736", "content": "", "creation_timestamp": "2026-03-24T03:17:26.000000Z"}, {"uuid": "96736261-61a9-4950-ac54-57b64fcfa1e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4737", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4737", "content": "", "creation_timestamp": "2026-03-24T03:17:27.000000Z"}, {"uuid": "340a96d3-da27-4658-b390-4407ab2c4145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4738", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4738", "content": "", "creation_timestamp": "2026-03-24T03:17:29.000000Z"}, {"uuid": "78955b41-4f41-41c3-affa-37fc3c4ece95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4741", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4741", "content": "", "creation_timestamp": "2026-03-24T03:17:29.000000Z"}, {"uuid": "e16935ad-7360-4650-a92b-fffb29f293d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4739", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4739", "content": "", "creation_timestamp": "2026-03-24T03:17:29.000000Z"}, {"uuid": "d73c9580-8a78-41f5-87bd-5c972ded7387", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4742", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4742", "content": "", "creation_timestamp": "2026-03-24T03:17:30.000000Z"}, {"uuid": "ed42cb3f-c34b-4d6f-a39f-48becfe61742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4729", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "307f4a4e-95a7-4e29-a9a3-b2ed5dc588c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4743", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4743", "content": "", "creation_timestamp": "2026-03-24T03:17:31.000000Z"}, {"uuid": "70eb6ee5-fe07-4ed3-834f-8a33fa5cd30d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4727", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "48716584-9b59-49cb-b40f-82cc7211a5b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4744", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4744", "content": "", "creation_timestamp": "2026-03-24T03:17:32.000000Z"}, {"uuid": "301a963b-a38c-4b42-a77d-d99d948f8f5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4725", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "5b860d25-dd87-49bd-9048-480645fe5ced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4723", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "051be892-069f-44cf-8554-7e45226a3a5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4755", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mhscilbnfp2p", "content": "", "creation_timestamp": "2026-03-24T09:52:48.712877Z"}, {"uuid": "b9a6dd02-9cc9-4856-b23a-c2663d8ec8a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4722", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "f6394fe2-e67c-4541-a98b-b0ce3bf91f0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4721", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "c6402e01-43c6-4995-8f66-74412160c78f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4720", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "b2954d5e-2a77-4213-bf95-7da5d5884cbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4717", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "5c4a3391-d8ea-4711-919e-4bb95fbc8074", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4716", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "c5ae43e9-c90c-4265-99f6-1095f4f1d055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4714", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "460949f4-6452-453c-b5ad-06a13b41665c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4712", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "0db6c633-aa89-4e0e-a10d-fd0cb4f6abf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4708", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "aee39dd8-b092-42e1-97c4-c2c5b9817f11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4706", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "82857c02-b3f8-4cc1-ab15-94258da01100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4705", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "703dbf12-bf16-4b17-8c65-07ac84f0e787", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4794", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4794", "content": "", "creation_timestamp": "2026-03-30T23:16:36.000000Z"}, {"uuid": "6d11a2b6-adae-4a87-9080-346943e83b18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4794", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3miegept3tk2h", "content": "", "creation_timestamp": "2026-03-31T14:50:08.785237Z"}, {"uuid": "47986397-b538-4edc-bf43-446723623e49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4799", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miekceiiek22", "content": "", "creation_timestamp": "2026-03-31T16:00:24.580882Z"}, {"uuid": "4f007789-efb4-4193-853d-cb97b7c84cbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3miexlhx5qw2q", "content": "", "creation_timestamp": "2026-03-31T19:58:10.343914Z"}, {"uuid": "032e51dd-56cd-454a-b0cb-bb7f38643e5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/lobsters-feed.bsky.social/post/3mieyatlxjc2l", "content": "", "creation_timestamp": "2026-03-31T20:10:06.269996Z"}, {"uuid": "8921913a-ef57-46f0-a8b0-8557552b45e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3miez2osbdv2j", "content": "", "creation_timestamp": "2026-03-31T20:24:33.113684Z"}, {"uuid": "fdec4ca2-52cf-4b57-9800-2a1c4651c3c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/netalexx.bsky.social/post/3mif2ub43os2y", "content": "", "creation_timestamp": "2026-03-31T20:56:46.878499Z"}, {"uuid": "01f32653-50d4-4838-a6eb-87309a16f15f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/dougmerritt.mathstodon.xyz.ap.brid.gy/post/3mifcgyqj6op2", "content": "", "creation_timestamp": "2026-03-31T23:12:33.234104Z"}, {"uuid": "4927233c-0a60-445c-91a2-9c795fbce30f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/kravietz.agora.echelon.pl.ap.brid.gy/post/3mifh244xjxi2", "content": "", "creation_timestamp": "2026-04-01T00:34:52.060447Z"}, {"uuid": "1cd07f3d-0287-42d0-87d4-61fdaa803eda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4747", "type": "seen", "source": "https://bsky.app/profile/flarestart.bsky.social/post/3mifipde7ve23", "content": "", "creation_timestamp": "2026-04-01T01:04:32.630581Z"}, {"uuid": "1421a8e4-b62e-425f-9d3a-08ea0a624a1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/grifferz.social.bitfolk.com.ap.brid.gy/post/3mifiy2vszde2", "content": "", "creation_timestamp": "2026-04-01T01:10:26.629475Z"}, {"uuid": "23c9ddfa-1696-480b-a884-5194708d761c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mifoaxorpj2k", "content": "", "creation_timestamp": "2026-04-01T02:43:52.830894Z"}, {"uuid": "b46a16ac-5aa2-40d9-8eb4-718e812bc2ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4748", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3migc73qfpe2i", "content": "", "creation_timestamp": "2026-04-01T08:40:44.447334Z"}, {"uuid": "4213fa71-9586-46a5-8c20-a491640ff9b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/hn100.bsky.social/post/3migcma5jng2u", "content": "", "creation_timestamp": "2026-04-01T08:48:06.426517Z"}, {"uuid": "583f4579-9504-4d5f-a0f7-19a2e5efb36e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/hnws.bsky.social/post/3migcnbadjn27", "content": "", "creation_timestamp": "2026-04-01T08:48:40.012653Z"}, {"uuid": "04991ea1-08cc-4d52-977d-4f367b6cfd40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/news.karthihegde.dev/post/3migcouv3hy2a", "content": "", "creation_timestamp": "2026-04-01T08:49:34.551227Z"}, {"uuid": "301009e6-52ef-4868-abaf-2f868d43c66d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4747", "type": "seen", "source": "https://bsky.app/profile/flarestart.bsky.social/post/3migeodjlw526", "content": "", "creation_timestamp": "2026-04-01T09:25:03.561224Z"}, {"uuid": "5441ee66-c3cf-41b0-a7ff-f2bd3c67f15a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/hackernewsbot.bsky.social/post/3miggmy4osw2r", "content": "", "creation_timestamp": "2026-04-01T10:00:05.644099Z"}, {"uuid": "d357c83c-63e4-4554-ab45-6f038eb17002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/hnbot.gsuscs.xyz/post/3miggnctso22x", "content": "", "creation_timestamp": "2026-04-01T10:00:17.523706Z"}, {"uuid": "f59e447a-ac4a-4878-b54a-6b352b937270", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/hnfeed.bsky.social/post/3miggsdtfxg2n", "content": "", "creation_timestamp": "2026-04-01T10:03:05.242960Z"}, {"uuid": "9d254c5c-3845-4a83-9163-d56a5ba8fe3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4747", "type": "seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mighgyave62h", "content": "", "creation_timestamp": "2026-04-01T10:14:38.607218Z"}, {"uuid": "6e0cfdc5-8517-4dec-801c-22d96f11ef73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/hnews.southla.social/post/3mighhp5j3226", "content": "", "creation_timestamp": "2026-04-01T10:15:01.970409Z"}, {"uuid": "6d9cf307-a9de-48be-ad88-9399649e272a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/hackernewstop5.bsky.social/post/3mighrckive2v", "content": "", "creation_timestamp": "2026-04-01T10:20:24.838247Z"}, {"uuid": "b16f296a-810e-48e6-8fc3-56a9bf54df53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/betterhn20.e-work.xyz/post/3mighrkn7zt2m", "content": "", "creation_timestamp": "2026-04-01T10:20:33.025279Z"}, {"uuid": "0b6a520c-e6c9-45dc-8c0b-b4dbdaaa262f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/116329107783430964", "content": "", "creation_timestamp": "2026-04-01T11:01:58.257257Z"}, {"uuid": "714919f5-fa4f-4ab4-bb97-56e09d297001", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/hackernewsrobot.bsky.social/post/3migkmmir5y2i", "content": "", "creation_timestamp": "2026-04-01T11:11:28.693371Z"}, {"uuid": "0245f225-2e65-45aa-b75e-aaa3024419e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/betterhn50.e-work.xyz/post/3migktwe2xa22", "content": "", "creation_timestamp": "2026-04-01T11:15:33.429684Z"}, {"uuid": "7212e1fa-353a-4fd6-999a-bbf59d5fb4eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://mastodon.social/users/h4ckernews/statuses/116328896609124240", "content": "", "creation_timestamp": "2026-04-01T11:55:49.366662Z"}, {"uuid": "ed79fcfa-44bd-418d-8309-8237ef29ef48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4747", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3migndmbjhm2k", "content": "", "creation_timestamp": "2026-04-01T12:00:07.656401Z"}, {"uuid": "075d64a0-b681-46f7-9959-55fb338f96b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/newsycombinatorbot.bsky.social/post/3migoxljv362u", "content": "", "creation_timestamp": "2026-04-01T12:29:11.199712Z"}, {"uuid": "94958bec-7f0e-49bd-9ce2-46bf230453da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://gist.github.com/stone776/7ed6327552b2a90b33bb89da48f1df2c", "content": "", "creation_timestamp": "2026-04-01T13:07:54.000000Z"}, {"uuid": "755e6fbc-7c75-42c2-ba6f-e5cc104832a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/hn100.atproto.rocks/post/3migu2j5gq22d", "content": "", "creation_timestamp": "2026-04-01T14:00:17.897964Z"}, {"uuid": "b2455ce5-6965-47ca-a518-c9ea55f74826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4748", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mih4g7eji227", "content": "", "creation_timestamp": "2026-04-01T16:30:00.654674Z"}, {"uuid": "c589ed25-e43a-4910-8372-0c8139ded527", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4748", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mih4hcpa3w2m", "content": "", "creation_timestamp": "2026-04-01T16:30:37.890989Z"}, {"uuid": "c8b59fa7-49f3-4fb7-ba1f-f795af68c60f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/hacker-news.bsky.social/post/3mih5nupkxm27", "content": "", "creation_timestamp": "2026-04-01T16:52:11.511474Z"}, {"uuid": "87437e09-0662-41d3-83f4-dc7be2e75ec3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/newsyc200.bsky.social/post/3mihfkmelhy2t", "content": "", "creation_timestamp": "2026-04-01T19:13:31.766135Z"}, {"uuid": "e3f132a1-c6eb-4dab-af65-af6b5bf4b988", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/hn100.atproto.rocks/post/3mihkojrz462i", "content": "", "creation_timestamp": "2026-04-01T20:45:12.027052Z"}, {"uuid": "e076b85f-0f6c-4052-9888-a1adfb0a1e7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/agentwyre.ai/post/3mihlqnrerm2j", "content": "", "creation_timestamp": "2026-04-01T21:04:17.065271Z"}, {"uuid": "d2dcf85c-78d1-4385-aaf4-b20dc76dc387", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/agentwyre.ai/post/3mihlqsjzt32w", "content": "", "creation_timestamp": "2026-04-01T21:04:21.938439Z"}, {"uuid": "ca588966-be2f-444a-8dcb-793d097d67ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/hn.rbrt.fr/post/3mihpc5fboc2d", "content": "", "creation_timestamp": "2026-04-01T22:07:45.679753Z"}, {"uuid": "408db8d0-224a-433e-b332-7c71e233c98f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/eltableroglobal.bsky.social/post/3mihpkg3adf2l", "content": "", "creation_timestamp": "2026-04-01T22:12:22.689438Z"}, {"uuid": "768573ce-e380-44fb-95d0-781aab337017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/newsyc250.bsky.social/post/3mihylgixeu2m", "content": "", "creation_timestamp": "2026-04-02T00:54:00.718419Z"}, {"uuid": "4d9a0d2d-beae-478e-8f6d-c515fada4e5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/clankussy.abu.guru/post/3miid32jzsi2b", "content": "", "creation_timestamp": "2026-04-02T04:01:42.531636Z"}, {"uuid": "fe2d24ad-9d27-4d95-88d8-c9895b1cc474", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/topickapp.bsky.social/post/3mij3iq47sq2v", "content": "", "creation_timestamp": "2026-04-02T11:18:51.508230Z"}, {"uuid": "00a7a7d0-7e9d-489e-a33a-0fa865560e23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/geeknewsbot.bsky.social/post/3mijrwcp3lu2z", "content": "", "creation_timestamp": "2026-04-02T18:00:08.778867Z"}, {"uuid": "76ab1bcd-09f1-47ab-8d7b-6a7f8390223f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3milj4j6cs72o", "content": "", "creation_timestamp": "2026-04-03T10:27:52.775429Z"}, {"uuid": "b460c80c-13b2-4be7-93c5-bb8c99a9dbe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4784", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3minmu7dy552v", "content": "", "creation_timestamp": "2026-04-04T06:40:08.628338Z"}, {"uuid": "0d231ac6-2667-4a32-88e6-cf53e44422ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://mastodon.bsd.cafe/users/grahamperrin/statuses/116353387664922378", "content": "", "creation_timestamp": "2026-04-05T17:56:40.588941Z"}, {"uuid": "5f6989a6-d560-4ecf-8bd2-4017bca9b51d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4740", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3miw3o7zjll2j", "content": "", "creation_timestamp": "2026-04-07T15:26:40.014833Z"}, {"uuid": "a2917223-898d-4037-9eb3-bea484cc7207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4788", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mixiihy3mp2i", "content": "", "creation_timestamp": "2026-04-08T04:48:38.306889Z"}, {"uuid": "a43e2bc8-c8e6-42ee-8cc9-b731ad18155f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4788", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mixj5djmqg2r", "content": "", "creation_timestamp": "2026-04-08T05:00:23.436738Z"}, {"uuid": "be175fa3-6bcc-4c2c-b7e8-a786f59d13c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4788", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4788", "content": "", "creation_timestamp": "2026-04-07T16:16:41.000000Z"}, {"uuid": "8db61012-fd4c-40f4-8896-97a6d1853ff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4700", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-013/", "content": "", "creation_timestamp": "2026-03-29T17:00:00.000000Z"}, {"uuid": "a3267a1a-a631-442c-a194-d7316123f470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4724", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-013/", "content": "", "creation_timestamp": "2026-03-29T17:00:00.000000Z"}, {"uuid": "ab55df36-36dd-45eb-bc9f-ec1beb013563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4702", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-013/", "content": "", "creation_timestamp": "2026-03-29T17:00:00.000000Z"}, {"uuid": "c718aa65-325c-4127-b588-2c04ed0b5e58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4717", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-013/", "content": "", "creation_timestamp": "2026-03-29T17:00:00.000000Z"}, {"uuid": "622c4d63-5184-4334-b353-ea253363500e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4711", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-013/", "content": "", "creation_timestamp": "2026-03-29T17:00:00.000000Z"}, {"uuid": "5bae35c5-75e6-472c-919b-a985c18f0879", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4723", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-013/", "content": "", "creation_timestamp": "2026-03-29T17:00:00.000000Z"}, {"uuid": "e1bd4eab-c358-4a6d-a51f-e61c4716ccd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4715", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-013/", "content": "", "creation_timestamp": "2026-03-29T17:00:00.000000Z"}, {"uuid": "0f372fda-2725-432b-9212-5c06cd0a88f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4716", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-013/", "content": "", "creation_timestamp": "2026-03-29T17:00:00.000000Z"}, {"uuid": "a646519f-1d0a-4037-b73a-c18aa992cad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4721", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-013/", "content": "", "creation_timestamp": "2026-03-29T17:00:00.000000Z"}, {"uuid": "b886b3cf-6ad1-43f2-a7a1-c7377952bfaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4725", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-013/", "content": "", "creation_timestamp": "2026-03-29T17:00:00.000000Z"}, {"uuid": "8ffd5313-5fb8-4cc1-b797-2625d64cddf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4701", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-013/", "content": "", "creation_timestamp": "2026-03-29T17:00:00.000000Z"}, {"uuid": "bd8bd405-d4d4-4dd0-80ad-c06eac9f480e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4720", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-013/", "content": "", "creation_timestamp": "2026-03-29T17:00:00.000000Z"}, {"uuid": "b538f980-2bb4-4979-80d5-fd0acaf4d5db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4729", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-013/", "content": "", "creation_timestamp": "2026-03-29T17:00:00.000000Z"}, {"uuid": "cb75a5e2-795b-40aa-9591-d3455ade911e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4710", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-013/", "content": "", "creation_timestamp": "2026-03-29T17:00:00.000000Z"}, {"uuid": "7afe5b93-dd50-48ce-9d59-de4fc69d08cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4705", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-013/", "content": "", "creation_timestamp": "2026-03-29T17:00:00.000000Z"}, {"uuid": "cc69c4d9-c2c0-448f-ba86-a13a38130776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4785", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mixrvlqwef2d", "content": "", "creation_timestamp": "2026-04-08T07:37:01.244523Z"}, {"uuid": "7de38241-0707-47ae-b7c1-dde37bb0cc3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4794", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0377/", "content": "", "creation_timestamp": "2026-03-30T17:00:00.000000Z"}, {"uuid": "2cb75de8-2587-4403-a1c5-a7c90002c239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://gist.github.com/FlorinAndrei/603a0ac5ca36b4d7cead673a52394e8a", "content": "", "creation_timestamp": "2026-04-08T17:46:32.000000Z"}, {"uuid": "3a5e32cd-ec7d-481f-ab5a-53d581b1e6c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://gist.github.com/7shi/11929811ffe69541dc053fbbc99efe6c", "content": "", "creation_timestamp": "2026-04-11T16:33:52.000000Z"}, {"uuid": "1bd72141-aa75-44a6-a16c-ae7bf4880847", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/evergreen2024.bsky.social/post/3mjbskqnez22g", "content": "", "creation_timestamp": "2026-04-12T07:15:32.534116Z"}, {"uuid": "ff299b23-43a3-4ce2-96fc-32677e9612cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/evergreen2024.bsky.social/post/3mjbsktj4kk2g", "content": "", "creation_timestamp": "2026-04-12T07:15:33.068018Z"}, {"uuid": "dd83055d-4c37-4790-93af-d3cf52974fc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/evergreen2024.bsky.social/post/3mjbsktj6j22g", "content": "", "creation_timestamp": "2026-04-12T07:15:33.583711Z"}, {"uuid": "96245691-746d-4a03-a623-6621cd8b9e6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/evergreen2024.bsky.social/post/3mjbsktj7ic2g", "content": "", "creation_timestamp": "2026-04-12T07:15:34.103627Z"}, {"uuid": "b9f01327-e934-4246-8686-eb14674d1d46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4786", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mjfwhyhvn62e", "content": "", "creation_timestamp": "2026-04-13T22:36:09.967646Z"}, {"uuid": "32ea827b-2eab-498b-a208-2c3899ded38c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4786", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjg7oonu242z", "content": "", "creation_timestamp": "2026-04-14T01:20:57.820208Z"}, {"uuid": "ccb2afba-f814-4996-9a20-c4cbcdd75e98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4786", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mjhhlor2h52v", "content": "", "creation_timestamp": "2026-04-14T13:15:07.423935Z"}, {"uuid": "9502d991-b5a6-417a-a25c-cf0f2335eb34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/hn100.bsky.social/post/3mjy2thiehi2t", "content": "", "creation_timestamp": "2026-04-21T03:42:11.008269Z"}, {"uuid": "1117f08f-edd5-4abd-ae17-699fd93f2da6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/news.karthihegde.dev/post/3mjy2xm5jmr2e", "content": "", "creation_timestamp": "2026-04-21T03:44:26.886168Z"}, {"uuid": "e8b50893-9d20-4e52-b240-ca7a83b987cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4747", "type": "seen", "source": "https://bsky.app/profile/hnws.bsky.social/post/3mjy2zbi4u52a", "content": "", "creation_timestamp": "2026-04-21T03:45:19.895171Z"}, {"uuid": "32971e3a-591b-4496-9a38-bd5548bab8a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4747", "type": "seen", "source": "https://bsky.app/profile/hnbot.gsuscs.xyz/post/3mjy3v4e3fs26", "content": "", "creation_timestamp": "2026-04-21T04:00:54.839239Z"}, {"uuid": "26fa2fa8-c451-4081-9d67-772c37a70186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/roygrubb.bsky.social/post/3mjy5hcxtce2h", "content": "", "creation_timestamp": "2026-04-21T04:28:59.099951Z"}, {"uuid": "a922e0ad-8a8d-4bb3-9a6a-f347d6f46ade", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4747", "type": "seen", "source": "https://bsky.app/profile/iampytest1.infosec.exchange.ap.brid.gy/post/3mk3uud6e7tl2", "content": "", "creation_timestamp": "2026-04-22T16:06:00.274995Z"}, {"uuid": "321884e4-0391-4380-bbf8-7fef13e3c153", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4775", "type": "seen", "source": "https://bsky.app/profile/sdlcommits.libsdl.org/post/3mk4jh3n3hc2t", "content": "", "creation_timestamp": "2026-04-22T22:14:15.707388Z"}, {"uuid": "8689568f-bce6-4e20-8d4a-4ae3f8149a8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4775", "type": "seen", "source": "https://bsky.app/profile/sdlcommits.libsdl.org/post/3mk4sl357dh2y", "content": "", "creation_timestamp": "2026-04-23T00:57:32.845258Z"}, {"uuid": "a9725181-b839-432b-8218-583dedd29a7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4775", "type": "seen", "source": "https://bsky.app/profile/sdlcommits.libsdl.org/post/3mk4sl5etne2s", "content": "", "creation_timestamp": "2026-04-23T00:57:34.999823Z"}, {"uuid": "005b218b-ee3d-4aa0-aa1b-3929c112955c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4775", "type": "seen", "source": "https://bsky.app/profile/sdlcommits.libsdl.org/post/3mk4sl7h7pn26", "content": "", "creation_timestamp": "2026-04-23T00:57:38.634074Z"}, {"uuid": "f9ddfe38-7fb2-465e-8df8-b113e8c9276d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/mel-echosphere.bsky.social/post/3mkabwlccoc2h", "content": "", "creation_timestamp": "2026-04-24T10:10:24.054992Z"}, {"uuid": "1fbe7dec-e0c5-4278-8bfd-f0125647750c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://t.me/GithubRedTeam/79538", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-4747\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a kaleth4\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-09 04:32:26\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-09T05:00:04.000000Z"}, {"uuid": "ed001602-e334-436f-9f5a-11de9d4d294d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4786", "type": "published-proof-of-concept", "source": "Telegram/_DNd18EV1_mvoOjDBqQ_at4zOgBzw_-F-OvAJ7pAjcWk8VU", "content": "", "creation_timestamp": "2026-04-13T23:21:32.000000Z"}, {"uuid": "e190eedc-e84f-4161-bb97-3b0276f5718e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4740", "type": "published-proof-of-concept", "source": "Telegram/8eXn4QLj3W1_8AYc2pIsiDgfSWsuolTpz1YwE008yOgTXtw", "content": "", "creation_timestamp": "2026-04-07T17:29:14.000000Z"}, {"uuid": "0527a78a-44ff-488c-8a1e-b0a7073ed394", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4788", "type": "seen", "source": "Telegram/dROJOrCDMnkwqXhb9-Y-ghLBhlUA50W24DQUefxFEp990g8", "content": "", "creation_timestamp": "2026-04-08T03:16:41.000000Z"}, {"uuid": "19e38ca7-5338-49bc-b65f-c38a29ca1abe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "published-proof-of-concept", "source": "Telegram/V9T5HdKaErtTwyv_1R14Z1Kq9GZJl6b2U5JUtaXbc9xcAYo", "content": "", "creation_timestamp": "2026-04-09T07:00:14.000000Z"}, {"uuid": "e8e2e154-5d46-45dc-9c88-148b9c39f332", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4789", "type": "seen", "source": "Telegram/_jbWMrWY3kup1vLwq2L3T9QUurzdP-pS58MJj_OuG7oT4-o", "content": "", "creation_timestamp": "2026-04-01T23:26:42.000000Z"}, {"uuid": "ed078fe7-15fc-40a8-817c-019177681ca5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4748", "type": "published-proof-of-concept", "source": "Telegram/23ZcvUWmnJsq-zA1xOv2ctyvywAVz8hRL5r96BcfYjQKx08", "content": "", "creation_timestamp": "2026-04-02T22:22:04.000000Z"}, {"uuid": "8da44eb1-97d2-4964-b258-a939bb270779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "published-proof-of-concept", "source": "https://t.me/orderofsixangles/2850", "content": "Claude Wrote a Full FreeBSD Remote Kernel RCE with Root Shell (CVE-2026-4747)\n\nhttps://blog.calif.io/p/mad-bugs-claude-wrote-a-full-freebsd", "creation_timestamp": "2026-04-01T05:55:11.000000Z"}, {"uuid": "453109b4-e17c-43a8-af72-5ebe8304883f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4786", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mkdgw4hxus2l", "content": "", "creation_timestamp": "2026-04-25T16:17:46.086987Z"}, {"uuid": "6efef87f-6b71-4ffb-bcc3-01e40e66f9f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4786", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mkdgw2pyuc2l", "content": "", "creation_timestamp": "2026-04-25T16:17:41.905504Z"}, {"uuid": "5270fdc4-7f9d-4c24-b813-4aaf08df10f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://mastodon.bsd.cafe/users/grahamperrin/statuses/116475051160928193", "content": "", "creation_timestamp": "2026-04-27T05:37:19.384117Z"}, {"uuid": "75edc6fc-0cce-474d-85c7-9c121e0ee85a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47782", "type": "seen", "source": "https://jvn.jp/en/vu/JVNVU93461473", "content": "", "creation_timestamp": "2026-05-19T18:20:00.000000Z"}, {"uuid": "0a97d7c1-c981-419f-9b86-d1b579cc6f76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47876", "type": "seen", "source": "https://bsky.app/profile/seraphimnews.bsky.social/post/3mrtzxbhain26", "content": "CVE-2026-47876: Kerentanan VM Escape Kritis VMware ESXi Melalui VMXNET3 \u2014 Broadcom Rilis Patch Darurat untuk Lima Celah Keamanan Virtualisasi\n\nhttps://www.seraphimnews.my.id/blog/cve-2026-47876-vmware-esxi-vm-escape-vmxnet3-juli-2026", "creation_timestamp": "2026-07-30T08:37:13.467053Z"}, {"uuid": "8b0ae68f-dbd0-4ce7-b6ee-eff654fce2e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47876", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrumtlur6z2b", "content": "\ud83d\udd17 CVE : CVE-2026-41703, CVE-2026-41709, CVE-2026-47876, CVE-2026-59309, CVE-2026-59310", "creation_timestamp": "2026-07-30T14:15:10.660340Z"}, {"uuid": "96d867b6-a38c-4bec-a435-da6157a261a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47668", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mru4zsbvmv27", "content": "A perfect 10 is a perfect excuse to skip patching today.\n\nDbGate.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-47668-dbgate-unauthenticated-rce-poc/\n\n#InfoSec #ThreatIntel", "creation_timestamp": "2026-07-30T09:32:19.018830Z"}, {"uuid": "322c3b73-6f8a-49fe-a2dd-f08b4277b724", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47876", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mrtmnkbitj2n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-63077: 32 interactions\nCVE-2026-50522: 15 interactions\nCVE-2026-54121: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-63077: 11 interactions\nCVE-2026-42897: 9 interactions\nCVE-2026-47876: 6 interactions\n", "creation_timestamp": "2026-07-30T04:39:08.605195Z"}, {"uuid": "e9746b0b-aad0-4748-9ab8-d8fd8dc409d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-47876", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/425eef6e-5590-4b78-be9c-a1f4a30adda1", "content": "", "creation_timestamp": "2026-07-30T06:11:30.515985Z"}, {"uuid": "f45685b7-71a1-4a20-8bed-594ba185356e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47876", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3mrtslp75mx2f", "content": "\u26a0\ufe0f  Failles VMware ESX / vSphere\n\nBroadcom a patch\u00e9 plusieurs failles critiques dans ses solutions de virtualisation, notamment la CVE-2026-47876 de type VM Escape.\n\nPlus d'infos par ici : \n- www.it-connect.fr/vmware-3-fai...\n\n#vmware #infosec", "creation_timestamp": "2026-07-30T06:25:30.194400Z"}, {"uuid": "f7857001-818c-4fa7-84c1-f7852080d9c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47873", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrug4pg6nw2z", "content": "CVE-2026-47873 - Spring Tools exposes Docker container control ports on all interfaces (0.0.0.0) instead of loopback. CVSS 8.0. Disable Docker integration or restrict network access immediately. #CVE #infosec #SpringTools\n\nhttps://www.valtersit.com/cve/CVE-2026-47873/", "creation_timestamp": "2026-07-30T12:15:00.326817Z"}, {"uuid": "0f94077e-c02a-40e3-8311-b8dcf7f565ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47858", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4pmcheqhxq63y", "content": "CVE-2026-47858 - live information startup mode is vulnerable for remote code execution\nCVE ID : CVE-2026-47858\n \n Published : July 30, 2026, 6:25 a.m. | 12\u00a0minutes ago\n \n Description : Starting Spring Boot applications in the Spring Tools with the live information mode enabled...", "creation_timestamp": "2026-07-30T06:51:21.605611Z"}, {"uuid": "9c74ef76-640b-4919-a258-2335c089dee2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47873", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fis556lycbb4g", "content": "CVE-2026-47873 - Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces\nCVE ID : CVE-2026-47873\n \n Published : July 30, 2026, 6:25 a.m. | 12\u00a0minutes ago\n \n Description : The Boot Dashboard Docker integration in Spring Too...", "creation_timestamp": "2026-07-30T06:57:21.130979Z"}, {"uuid": "5faee780-b8a7-4c2c-b195-6b7b0d163f15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47876", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrukdsqbcy2z", "content": "CVE-2026-47876 (CRITICAL): VMware Cloud Foundation VMXNET3 bug lets VM admins execute code on the host. Limit VM admin rights, switch adapters if possible. Patch pending \u2014 monitor advisories. https://radar.offseq.com/threat/cve-2026-47876-cwe-787-out-of-bounds-write-in-vmware-cloud-foundation-111...", "creation_timestamp": "2026-07-30T13:30:34.085937Z"}, {"uuid": "28be91ff-6bf6-4190-99e3-a40811d972fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47876", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mrudlnq6d22a", "content": "Broadcom Patches Critical VMware ESXi Vulnerability Enabling Host Code Execution\n\nBroadcom patched a critical VMware ESXi VM escape flaw (CVE-2026-47876) that could let attackers run code on the host from a compromised virtual machine. Broadcom has released patches to address five\u2026\n#hackernews #news", "creation_timestamp": "2026-07-30T11:29:41.056336Z"}, {"uuid": "486ada39-eeea-41dc-a1bc-99001cd02fed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47876", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrukgl7ayg2z", "content": "CVE-2026-47876 - cloud foundation\nA critical security risk exists in VMware ESX's VMXNET3 network adapter. An attacker with local administrative access to a virtual machine using this adapter could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cloudfoundation #vmware #CVE #infosec", "creation_timestamp": "2026-07-30T13:32:06.164411Z"}, {"uuid": "9e08b534-7fa9-46fe-9418-f1878547e655", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47882", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4myfr6uwsma7w", "content": "CVE-2026-47882 - Spring Boot DevTools remote secret generated with a non-cryptographic PRNG\nCVE ID : CVE-2026-47882\n \n Published : July 30, 2026, 6:25 a.m. | 12\u00a0minutes ago\n \n Description : When enabling Spring Boot DevTools support for a remote application target (for example...", "creation_timestamp": "2026-07-30T07:03:21.280783Z"}, {"uuid": "3ad0a917-edfe-4ebf-9beb-4d2f140dd06e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47858", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-759", "content": "", "creation_timestamp": "2026-07-30T16:15:06.191096Z"}, {"uuid": "2258155a-d5a3-49ab-9205-a0993c0918cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47873", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-759", "content": "", "creation_timestamp": "2026-07-30T16:15:08.560557Z"}, {"uuid": "889587c4-3bb8-4265-9fa6-e94971f5e153", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47882", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-759", "content": "", "creation_timestamp": "2026-07-30T16:15:10.942444Z"}, {"uuid": "0e33015a-5222-433f-a872-989a83a950c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47876", "type": "seen", "source": "https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-vmware-7", "content": "", "creation_timestamp": "2026-07-30T16:45:07.431589Z"}, {"uuid": "110a31de-76eb-4fbc-b688-ec125966e463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47876", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117037808517517411", "content": "New;\nBroadcom has released advisories relating to several high and medium-severity vulnerabilities https://support.broadcom.com/web/ecx/security-advisory #Broadcom \nNvidia:\nCRITICAL: NVIDIA Dynamo - July 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5842\nNVIDIA Triton Inference Server - June 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5860 #Nvidia \nDell:\nSecurity Update for Dell PowerProtect Data Domain Multiple Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000450699/dsa-2026-060-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities #Dell #Apache \nGoogle:\nThis CRITICAL vulnerability was updated yesterday: VMSA-2026-0006.1: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709) https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017 #google #infosec #vulnerability", "creation_timestamp": "2026-08-04T14:53:54.658148Z"}, {"uuid": "8f96fd66-0bbc-42b9-bf02-29eaa3a3cf24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mruwc4mz6n2l", "content": "17-year-old CVE-2026-4747 remote code execution flaw in FreeBSD was autonomously exploited by Mythos.", "creation_timestamp": "2026-07-30T17:04:22.291035Z"}, {"uuid": "57fa9889-f31e-472f-bf39-ccb2aad8fa97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47876", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mrv3r6t3m42l", "content": "CVE-2026-47876: Critical VMware ESXi VM Escape Flaw Enables Host Code Execution\n\n", "creation_timestamp": "2026-07-30T18:42:16.595701Z"}, {"uuid": "e366c2b3-ca97-4bd4-9972-308b87b4a5eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47017", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrvaivclay23", "content": "\ud83d\udccc CVE-2026-47017 - Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Process Scheduler).  Supported versions that are affec... https://www.cyberhub.blog/cves/CVE-2026-47017", "creation_timestamp": "2026-07-30T20:07:07.260190Z"}, {"uuid": "fcc8437d-4005-46aa-9ed5-60605d6ddb2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47876", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/vmware-security-advisory-av26-763", "content": "", "creation_timestamp": "2026-07-30T20:15:08.141185Z"}, {"uuid": "5bb0befe-ade5-43d1-b29a-d6fae6f79a65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47623", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2bly5qs5x5ynn", "content": "CVE-2026-47623 - NVIDIA Dynamo Insecure Deserialization Vulnerability\nCVE ID : CVE-2026-47623\n \n Published : Aug. 4, 2026, 5:33 p.m. | 12\u00a0minutes ago\n \n Description : NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted da...", "creation_timestamp": "2026-08-04T18:12:35.043737Z"}, {"uuid": "1dacd80b-f756-4eb6-9ebb-03cd2ee04729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47616", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3msboiblw2p2l", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-47616](https://github.com/NVIDIA/product-security/tree/main/2026/5842)\nNVIDIA Dynamo fo...\nhttps://github.com/NVIDIA/product-security/tree/main/2026/5842 #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-08-04T18:49:15.117657Z"}, {"uuid": "9809dc12-bdbc-4399-b5af-b42a3c7c8505", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47876", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mrw5tgnutq2m", "content": "\ud83e\udd16 VMware patches 3 critical vulns: vCenter auth bypass (CVE-2026-59309, 9.8), syslog dir traversal (CVE-2026-59310, 9.8), VMXNET3 OOB write (CVE-2026-47876, 9.3). Patch now.\nhttps://www.bleepingcomputer.com/news/security/vmware-fixes-three-critical-flaws-allowing-auth-bypass-vm-escapes/", "creation_timestamp": "2026-07-31T04:51:58.813474Z"}, {"uuid": "d2073fa3-3455-4630-afc6-b5d4829b622a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47876", "type": "seen", "source": "https://bsky.app/profile/etguenni.bsky.social/post/3mrwmokz3qs2j", "content": "Teils kritische Schwachstellen (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709) in VMware by Broadcom-Produkten (VMware ESX, vCenter, Workstation, Fusion). Updates sind laut Adversory vorhanden. \nborncity.com/blog/2026/07...", "creation_timestamp": "2026-07-31T09:17:42.214186Z"}, {"uuid": "0668aada-85a3-485d-8eee-40e667fc8927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47033", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrwnrbqhqu2c", "content": "\ud83d\udccc CVE-2026-47033 - Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are af... https://www.cyberhub.blog/cves/CVE-2026-47033", "creation_timestamp": "2026-07-31T09:37:06.340264Z"}, {"uuid": "08992273-c884-412d-add5-85ad9671cafb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/allaboutsecurity.bsky.social/post/3mkznyouuuk2d", "content": "CHERI-Speichersicherheit reduziert LLM-gefundene FreeBSD-Schwachstelle CVE-2026-4747\nwww.all-about-security.de/cheri-speich...\n#llm", "creation_timestamp": "2026-05-04T12:22:56.742250Z"}, {"uuid": "8be16cff-b356-412c-a203-4badda1268bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4790", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3ml7nog5u7f2x", "content": "CVE-2026-4790 premium-addons-for-elementor (CVSS Score 5.4) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-06T21:33:06.383198Z"}, {"uuid": "efd5f51b-1146-42fc-96c9-92f9ec8713c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47668", "type": "seen", "source": "https://t.me/GithubRedTeam/96021", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-47668\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a s-vx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-31 14:57:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated RCE in DBGate <= 7.1.8\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-31T16:00:03.890894Z"}, {"uuid": "4360d522-9ba1-4ff2-8b08-8afaab30b84d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47304", "type": "seen", "source": "https://gist.github.com/djlan/97578889517549f13bd08d88c8aa1f4d", "content": "# PR \u89e3\u91ca: [SECURITY] Bump System.Security.Cryptography.Xml from 8.0.3 to 8.0.4\n\n\u901a\u8fc7\u96c6\u4e2d\u56fa\u5b9a\u5b89\u5168\u4fee\u590d\u7248\u672c\u5e76\u5728\u53d7\u5f71\u54cd\u9879\u76ee\u4e2d\u589e\u52a0\u663e\u5f0f\u4f9d\u8d56\uff0c\u7edf\u4e00\u8986\u76d6\u6613\u53d7\u653b\u51fb\u7684\u4f20\u9012\u4f9d\u8d56\u7248\u672c\u3002\n\n**PR \u94fe\u63a5**: https://dev.azure.com/powerbi/MWC/_git/workload-notebook/pullrequest/1045395\n**\u4f5c\u8005**: Dependabot\n**\u72b6\u6001**: active\n**\u5206\u652f**: `dependabot/nuget/System.Security.Cryptography.Xml-8.0.4-243679` \u2192 `master`\n**\u53d8\u66f4\u7edf\u8ba1**: 6 files changed, +6/-0 lines\n\n## \u76ee\u5f55\n- [\u53d8\u66f4\u6982\u89c8](#\u53d8\u66f4\u6982\u89c8)\n- [\u5f71\u54cd\u5206\u6790](#\u5f71\u54cd\u5206\u6790)\n\n---\n\n## \u53d8\u66f4\u6982\u89c8\n\n### 1. \u96c6\u4e2d\u4f9d\u8d56\u7248\u672c\u7ba1\u7406\n\n**\u76ee\u7684**: \u5c06 `System.Security.Cryptography.Xml` \u7edf\u4e00\u56fa\u5b9a\u5230\u5305\u542b\u5b89\u5168\u4fee\u590d\u7684 `8.0.4`\uff0c\u907f\u514d\u5404\u9879\u76ee\u7ee7\u7eed\u901a\u8fc7\u4f20\u9012\u4f9d\u8d56\u89e3\u6790\u5230\u5b58\u5728\u9ad8\u5371\u6f0f\u6d1e\u7684\u65e7\u7248\u672c\uff0c\u5e76\u786e\u4fdd\u540e\u7eed\u8fd8\u539f\u7ed3\u679c\u4e00\u81f4\u3002\n\n**\u6d89\u53ca\u6587\u4ef6**:\n- [Directory.Packages.props](https://dev.azure.com/powerbi/MWC/_git/workload-notebook/pullrequest/1045395?path=/Directory.Packages.props&_a=files) \u2014 \u5728\u4e2d\u592e\u5305\u7248\u672c\u7ba1\u7406\u4e2d\u58f0\u660e `System.Security.Cryptography.Xml` \u7248\u672c `8.0.4`\n\n**\u5173\u952e\u53d8\u66f4**:\n1. **\u7edf\u4e00\u9501\u5b9a\u5b89\u5168\u7248\u672c**: \u5728\u4ed3\u5e93\u7ea7 `Directory.Packages.props` \u4e2d\u65b0\u589e\u5305\u7248\u672c\u58f0\u660e\uff0c\u4f7f\u6240\u6709\u663e\u5f0f\u5f15\u7528\u8be5\u5305\u7684\u9879\u76ee\u4f7f\u7528\u540c\u4e00\u4e2a\u4fee\u590d\u7248\u672c\uff0c\u964d\u4f4e\u7248\u672c\u6f02\u79fb\u548c\u9057\u6f0f\u4fee\u590d\u7684\u98ce\u9669\u3002\n2. **\u5b89\u5168\u544a\u8b66\u5904\u7f6e**: \u6b64\u5347\u7ea7\u7528\u4e8e\u5904\u7406 Component Governance \u62a5\u544a\u7684\u591a\u9879\u9ad8\u5371\u5b89\u5168\u544a\u8b66\uff0c\u5305\u62ec CVE-2026-50525 \u548c CVE-2026-47304\uff1b\u91c7\u7528\u8865\u4e01\u7248\u672c\u5347\u7ea7\u800c\u975e\u8de8\u4e3b\u7248\u672c\u5347\u7ea7\uff0c\u53ef\u5c3d\u91cf\u7f29\u5c0f\u517c\u5bb9\u6027\u5f71\u54cd\u3002\n\n[\u2191 \u8fd4\u56de\u76ee\u5f55](#\u76ee\u5f55)\n\n---\n\n### 2. \u6838\u5fc3\u5951\u7ea6\u4e0e\u5e73\u53f0\u7ec4\u4ef6\n\n**\u76ee\u7684**: \u6838\u5fc3\u7a0b\u5e8f\u96c6\u53ef\u80fd\u4ece\u4e0a\u6e38\u5305\u95f4\u63a5\u4f7f\u7528 XML \u6570\u5b57\u7b7e\u540d\u3001\u52a0\u5bc6\u6216\u5bc6\u94a5\u5904\u7406\u80fd\u529b\uff1b\u589e\u52a0\u663e\u5f0f\u5f15\u7528\u540e\uff0cNuGet \u89e3\u6790\u4e0d\u518d\u4f9d\u8d56\u4f20\u9012\u4f9d\u8d56\u94fe\u4e2d\u7684\u65e7\u7248\u672c\uff0c\u4ece\u800c\u8ba9\u5b89\u5168\u7248\u672c\u8986\u76d6\u7a33\u5b9a\u4e14\u53ef\u5ba1\u8ba1\u3002\n\n**\u6d89\u53ca\u6587\u4ef6**:\n- [Core/Microsoft.Notebook.Contracts/Microsoft.Notebook.Contracts.csproj](https://dev.azure.com/powerbi/MWC/_git/workload-notebook/pullrequest/1045395?path=/Core/Microsoft.Notebook.Contracts/Microsoft.Notebook.Contracts.csproj&_a=files) \u2014 \u4e3a Notebook \u5951\u7ea6\u9879\u76ee\u589e\u52a0\u663e\u5f0f\u5b89\u5168\u5305\u5f15\u7528\n- [Core/Microsoft.Notebook.Platform/Microsoft.Notebook.Platform.csproj](https://dev.azure.com/powerbi/MWC/_git/workload-notebook/pullrequest/1045395?path=/Core/Microsoft.Notebook.Platform/Microsoft.Notebook.Platform.csproj&_a=files) \u2014 \u4e3a\u5e73\u53f0\u5b9e\u73b0\u9879\u76ee\u589e\u52a0\u663e\u5f0f\u5b89\u5168\u5305\u5f15\u7528\n\n**\u5173\u952e\u53d8\u66f4**:\n1. **\u8986\u76d6\u4f20\u9012\u4f9d\u8d56**: \u4e24\u4e2a\u6838\u5fc3\u9879\u76ee\u663e\u5f0f\u5f15\u7528 `System.Security.Cryptography.Xml`\uff0c\u8feb\u4f7f\u4f9d\u8d56\u89e3\u6790\u9009\u62e9\u4e2d\u592e\u58f0\u660e\u7684 `8.0.4`\uff0c\u800c\u4e0d\u662f\u7531 Newtonsoft.Json\u3001\u8eab\u4efd\u7ec4\u4ef6\u6216\u5176\u4ed6\u4e0a\u6e38\u4f9d\u8d56\u95f4\u63a5\u5e26\u5165\u65e7\u7248\u672c\u3002\n2. **\u4fdd\u6301\u4ee3\u7801\u884c\u4e3a\u4e0d\u53d8**: PR \u672a\u4fee\u6539\u4e1a\u52a1\u4ee3\u7801\u6216\u516c\u5f00\u63a5\u53e3\uff0c\u76ee\u6807\u662f\u66ff\u6362\u8fd0\u884c\u65f6\u52a0\u8f7d\u7684\u4f9d\u8d56\u5b9e\u73b0\uff1b\u6b63\u5e38\u60c5\u51b5\u4e0b\u4e0d\u4f1a\u6539\u53d8 Notebook \u5951\u7ea6\u6216\u5e73\u53f0\u529f\u80fd\uff0c\u4f46\u4f1a\u4f7f\u76f8\u5173 XML \u52a0\u5bc6\u4e0e\u7b7e\u540d\u8def\u5f84\u83b7\u5f97\u5b89\u5168\u4fee\u590d\u3002\n\n[\u2191 \u8fd4\u56de\u76ee\u5f55](#\u76ee\u5f55)\n\n---\n\n### 3. Geneva Actions \u670d\u52a1\u7ec4\u4ef6\n\n**\u76ee\u7684**: \u670d\u52a1\u9879\u76ee\u5305\u542b\u8eab\u4efd\u548c\u8fd0\u7ef4\u64cd\u4f5c\u76f8\u5173\u4f9d\u8d56\uff0c\u5b89\u5168\u7ec4\u4ef6\u53ef\u80fd\u7ecf\u7531\u8fd9\u4e9b\u4f9d\u8d56\u8fdb\u5165\u90e8\u7f72\u4ea7\u7269\uff1b\u663e\u5f0f\u56fa\u5b9a\u7248\u672c\u53ef\u4ee5\u786e\u4fdd\u751f\u4ea7\u670d\u52a1\u4e0d\u4f1a\u7ee7\u7eed\u643a\u5e26\u5df2\u77e5\u6f0f\u6d1e\u7a0b\u5e8f\u96c6\u3002\n\n**\u6d89\u53ca\u6587\u4ef6**:\n- [Service/Microsoft.ASPaaS.GenevaActions.Notebook/Microsoft.ASPaaS.GenevaActions.Notebook.csproj](https://dev.azure.com/powerbi/MWC/_git/workload-notebook/pullrequest/1045395?path=/Service/Microsoft.ASPaaS.GenevaActions.Notebook/Microsoft.ASPaaS.GenevaActions.Notebook.csproj&_a=files) \u2014 \u5728 Geneva Actions Notebook \u670d\u52a1\u4e2d\u663e\u5f0f\u5f15\u7528\u5b89\u5168\u4fee\u590d\u7248\u672c\n\n**\u5173\u952e\u53d8\u66f4**:\n1. **\u4fdd\u62a4\u670d\u52a1\u90e8\u7f72\u4ea7\u7269**: \u5c06\u4fee\u590d\u540e\u7684\u7a0b\u5e8f\u96c6\u7eb3\u5165\u670d\u52a1\u9879\u76ee\u7684\u76f4\u63a5\u4f9d\u8d56\u56fe\uff0c\u51cf\u5c11\u6784\u5efa\u3001\u6253\u5305\u6216\u53d1\u5e03\u8fc7\u7a0b\u4e2d\u56e0\u4e0d\u540c\u4f20\u9012\u4f9d\u8d56\u987a\u5e8f\u800c\u56de\u9000\u5230\u65e7\u7248\u672c\u7684\u53ef\u80fd\u6027\u3002\n2. **\u5f3a\u5316\u4f9d\u8d56\u53ef\u89c1\u6027**: \u76f4\u63a5\u5f15\u7528\u4f7f\u5b89\u5168\u5173\u952e\u4f9d\u8d56\u5728\u9879\u76ee\u6587\u4ef6\u4e2d\u53ef\u89c1\uff0c\u4fbf\u4e8e Component Governance\u3001\u4f9d\u8d56\u626b\u63cf\u548c\u540e\u7eed\u5347\u7ea7\u5de5\u5177\u6301\u7eed\u8ddf\u8e2a\u3002\n\n[\u2191 \u8fd4\u56de\u76ee\u5f55](#\u76ee\u5f55)\n\n---\n\n### 4. Web API \u6d4b\u8bd5\u8f85\u52a9\u7ec4\u4ef6\n\n**\u76ee\u7684**: \u6d4b\u8bd5\u8f85\u52a9\u9879\u76ee\u4e5f\u9700\u8981\u4f7f\u7528\u4e0e\u751f\u4ea7\u4ee3\u7801\u4e00\u81f4\u7684\u5b89\u5168\u4f9d\u8d56\u7248\u672c\uff0c\u907f\u514d\u6d4b\u8bd5\u6784\u5efa\u4ecd\u89e6\u53d1\u6f0f\u6d1e\u544a\u8b66\uff0c\u5e76\u964d\u4f4e\u6d4b\u8bd5\u73af\u5883\u4e0e\u5b9e\u9645\u8fd0\u884c\u73af\u5883\u4e4b\u95f4\u7684\u4f9d\u8d56\u5dee\u5f02\u3002\n\n**\u6d89\u53ca\u6587\u4ef6**:\n- [test/Microsoft.Notebook.Test.WebApiTestHelpers/Microsoft.Notebook.Test.WebApiTestHelpers.csproj](https://dev.azure.com/powerbi/MWC/_git/workload-notebook/pullrequest/1045395?path=/test/Microsoft.Notebook.Test.WebApiTestHelpers/Microsoft.Notebook.Test.WebApiTestHelpers.csproj&_a=files) \u2014 \u4e3a Web API \u6d4b\u8bd5\u8f85\u52a9\u9879\u76ee\u589e\u52a0\u663e\u5f0f\u5305\u5f15\u7528\n\n**\u5173\u952e\u53d8\u66f4**:\n1. **\u7edf\u4e00\u6d4b\u8bd5\u4f9d\u8d56\u56fe**: \u6d4b\u8bd5\u8f85\u52a9\u7a0b\u5e8f\u96c6\u540c\u6837\u89e3\u6790\u5230 `8.0.4`\uff0c\u907f\u514d\u6d4b\u8bd5\u9879\u76ee\u4fdd\u7559\u65e7\u4f20\u9012\u4f9d\u8d56\uff0c\u786e\u4fdd\u5b89\u5168\u626b\u63cf\u548c\u6d4b\u8bd5\u8fd8\u539f\u7ed3\u679c\u4e0e\u4e3b\u9879\u76ee\u4fdd\u6301\u4e00\u81f4\u3002\n2. **\u907f\u514d\u544a\u8b66\u6b8b\u7559**: \u4ec5\u5347\u7ea7\u751f\u4ea7\u9879\u76ee\u53ef\u80fd\u65e0\u6cd5\u6e05\u9664\u4ed3\u5e93\u7ea7 Component Governance \u544a\u8b66\uff1b\u8986\u76d6\u6d4b\u8bd5\u9879\u76ee\u6709\u52a9\u4e8e\u5b8c\u6574\u79fb\u9664\u53d7\u5f71\u54cd\u7248\u672c\u3002\n\n[\u2191 \u8fd4\u56de\u76ee\u5f55](#\u76ee\u5f55)\n\n---\n\n## \u5f71\u54cd\u5206\u6790\n\n- **\u5f71\u54cd\u8303\u56f4**: \u5f71\u54cd NuGet \u8fd8\u539f\u3001\u7f16\u8bd1\u548c\u53d1\u5e03\u4f9d\u8d56\u56fe\uff0c\u8986\u76d6 Notebook \u6838\u5fc3\u5951\u7ea6\u3001\u5e73\u53f0\u5b9e\u73b0\u3001Geneva Actions \u670d\u52a1\u53ca Web API \u6d4b\u8bd5\u8f85\u52a9\u9879\u76ee\uff1b\u6ca1\u6709\u4e1a\u52a1\u903b\u8f91\u3001\u914d\u7f6e\u534f\u8bae\u6216\u516c\u5f00 API \u53d8\u66f4\u3002\n- **\u7528\u6237\u611f\u77e5**: \u9884\u8ba1\u7ec8\u7aef\u7528\u6237\u65e0\u53ef\u89c1\u529f\u80fd\u53d8\u5316\u3002\u4e3b\u8981\u6536\u76ca\u662f\u964d\u4f4e XML \u52a0\u5bc6\u3001\u7b7e\u540d\u53ca\u76f8\u5173\u5bc6\u94a5\u5904\u7406\u8def\u5f84\u7684\u5b89\u5168\u98ce\u9669\uff0c\u5e76\u6d88\u9664\u5bf9\u5e94\u7684\u7ec4\u4ef6\u6cbb\u7406\u9ad8\u5371\u544a\u8b66\u3002\n- **\u98ce\u9669\u70b9**:\n  1. **\u4f9d\u8d56\u89e3\u6790\u51b2\u7a81**: \u82e5\u5176\u4ed6\u76f4\u63a5\u6216\u4f20\u9012\u4f9d\u8d56\u4e25\u683c\u8981\u6c42\u4e0d\u540c\u7248\u672c\uff0c\u663e\u5f0f\u56fa\u5b9a `8.0.4` \u53ef\u80fd\u4ea7\u751f\u5305\u964d\u7ea7\u3001\u7248\u672c\u51b2\u7a81\u6216\u8fd0\u884c\u65f6\u7a0b\u5e8f\u96c6\u7ed1\u5b9a\u95ee\u9898\uff0c\u9700\u8981\u5173\u6ce8\u8fd8\u539f\u548c\u96c6\u6210\u6d4b\u8bd5\u7ed3\u679c\u3002\n  2. **\u8865\u4e01\u7248\u672c\u884c\u4e3a\u5dee\u5f02**: \u867d\u7136 `8.0.3` \u5230 `8.0.4` \u5c5e\u4e8e\u8865\u4e01\u5347\u7ea7\u4e14\u7834\u574f\u6027\u53d8\u66f4\u6982\u7387\u8f83\u4f4e\uff0c\u4f46\u5b89\u5168\u4fee\u590d\u53ef\u80fd\u6536\u7d27\u5bf9\u5f02\u5e38 XML\u3001\u7b7e\u540d\u683c\u5f0f\u6216\u52a0\u5bc6\u53c2\u6570\u7684\u6821\u9a8c\uff0c\u4f9d\u8d56\u65e7\u5bbd\u677e\u884c\u4e3a\u7684\u8fb9\u7f18\u573a\u666f\u53ef\u80fd\u53d7\u5230\u5f71\u54cd\u3002\n  3. **\u76ee\u6807\u6846\u67b6\u517c\u5bb9\u6027**: \u591a\u4e2a\u4e0d\u540c\u7528\u9014\u7684\u9879\u76ee\u5171\u540c\u5f15\u7528\u8be5\u5305\uff1b\u9700\u8981\u786e\u4fdd `8.0.4` \u63d0\u4f9b\u7684\u76ee\u6807\u6846\u67b6\u8d44\u4ea7\u4e0e\u5404\u9879\u76ee\u5f53\u524d Target Framework \u517c\u5bb9\uff0c\u4e14\u53d1\u5e03\u4ea7\u7269\u5305\u542b\u6b63\u786e\u7a0b\u5e8f\u96c6\u3002\n  4. **\u663e\u5f0f\u4f9d\u8d56\u7ef4\u62a4\u6210\u672c**: \u539f\u672c\u5c5e\u4e8e\u4f20\u9012\u4f9d\u8d56\u7684\u5305\u73b0\u5728\u88ab\u4e94\u4e2a\u9879\u76ee\u76f4\u63a5\u5f15\u7528\u3002\u672a\u6765\u82e5\u4e2d\u592e\u7248\u672c\u5347\u7ea7\u6216\u4e0a\u6e38\u4f9d\u8d56\u79fb\u9664\u8be5\u7ec4\u4ef6\uff0c\u8fd9\u4e9b\u5f15\u7528\u4ecd\u4f1a\u4fdd\u7559\uff0c\u9700\u8981\u6301\u7eed\u7ef4\u62a4\u5e76\u5b9a\u671f\u786e\u8ba4\u5176\u5fc5\u8981\u6027\u3002\n  5. **\u56fa\u5b9a\u7248\u672c\u7684\u65f6\u6548\u6027**: `8.0.4` \u662f\u4e3a\u5f53\u524d\u5b89\u5168\u544a\u8b66\u9009\u62e9\u7684\u786c\u7f16\u7801\u4e2d\u592e\u7248\u672c\uff0c\u8fd9\u662f\u53ef\u91cd\u590d\u6784\u5efa\u6240\u5fc5\u9700\u7684\uff0c\u4f46\u82e5\u540e\u7eed\u51fa\u73b0\u65b0\u6f0f\u6d1e\uff0c\u5fc5\u987b\u518d\u6b21\u5347\u7ea7\uff0c\u4e0d\u80fd\u5c06\u672c\u6b21\u56fa\u5b9a\u89c6\u4e3a\u957f\u671f\u514d\u7ef4\u62a4\u3002\n  6. **\u65e0\u8c03\u8bd5\u4ee3\u7801\u98ce\u9669**: \u672c\u6b21\u53d8\u66f4\u4ec5\u6d89\u53ca\u9879\u76ee\u4f9d\u8d56\u58f0\u660e\uff0c\u672a\u5f15\u5165\u8c03\u8bd5\u4ee3\u7801\u3001\u65e5\u5fd7\u8f93\u51fa\u3001\u6d4b\u8bd5\u5f00\u5173\u6216\u4e34\u65f6\u7ed5\u8fc7\u903b\u8f91\u3002\n  7. **\u65e0\u4e0d\u7a33\u5b9a API \u6216\u516c\u5f00\u7834\u574f\u6027\u53d8\u66f4**: PR \u672a\u8c03\u7528\u65b0 API\uff0c\u4e5f\u672a\u4fee\u6539\u516c\u5f00\u5951\u7ea6\uff1b\u4e3b\u8981\u517c\u5bb9\u6027\u98ce\u9669\u6765\u81ea\u5e95\u5c42\u5b89\u5168\u5e93\u4fee\u590d\u540e\u7684\u6821\u9a8c\u884c\u4e3a\uff0c\u800c\u975e\u6e90\u7801\u7ea7 API \u53d8\u5316\u3002\n", "creation_timestamp": "2026-07-31T16:26:45.545991Z"}, {"uuid": "12db44c1-e875-4089-a64d-b964f26c2647", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47851", "type": "seen", "source": "Telegram/CcRo1gMZwWwNofZNwYOQ3d2hQNvA4xaZ28UNdx64Ma-ZFGg", "content": "", "creation_timestamp": "2026-08-29T23:00:16.921945Z"}, {"uuid": "9082b7a4-7bc1-4254-ae32-a7a3122088fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47668", "type": "seen", "source": "Telegram/57kgthPlcq0SdzKJJB0-p5vNcHKAbE1eV94lCqYuwiHW3w8", "content": "", "creation_timestamp": "2026-07-31T22:00:02.868807Z"}, {"uuid": "c3f05522-defa-4eec-9448-34800b36c885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47668", "type": "seen", "source": "Telegram/lzREupovl051IH-OQxANl3xWT1ZBkl1PTRgXqKJ4p6mKnoQ", "content": "", "creation_timestamp": "2026-07-31T22:00:02.723495Z"}, {"uuid": "bc54ba40-f3bf-461b-ae92-102a3af051ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47211", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gmxn7ldiwvsva", "content": "CVE-2026-66065 - Ouroboros: Untrusted project .env can still reach RCE via omitted execution-routing keys (Incomplete fix of CVE-2026-47211)\nCVE ID : CVE-2026-66065\n \n Published : Aug. 3, 2026, 9:16 p.m. | 28\u00a0minutes ago\n \n Description : Ouroboros is a local-first runtime for ...", "creation_timestamp": "2026-08-03T22:02:17.510391Z"}, {"uuid": "735fa419-aad9-49c6-adc7-56be87ef63d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47668", "type": "published-proof-of-concept", "source": "Telegram/lzREupovl051IH-OQxANl3xWT1ZBkl1PTRgXqKJ4p6mKnoQ", "content": "", "creation_timestamp": "2026-08-01T00:00:11.095502Z"}, {"uuid": "43cbb58d-de47-4212-badf-b537ae5c75cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47668", "type": "published-proof-of-concept", "source": "Telegram/57kgthPlcq0SdzKJJB0-p5vNcHKAbE1eV94lCqYuwiHW3w8", "content": "", "creation_timestamp": "2026-08-01T00:00:11.012649Z"}, {"uuid": "20d15068-1da5-4e50-a80d-cc884f0581f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47668", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96021", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-47668\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a s-vx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-31 14:57:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated RCE in DBGate <= 7.1.8\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-01T00:00:27.565265Z"}, {"uuid": "2dc451fc-6761-4bed-9816-f81f09ed5aea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4798", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlqcpedfqw2p", "content": "CVE-2026-4798 - Avada Builder\nCVE ID : CVE-2026-4798\n \n Published : May 13, 2026, 9:26 a.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : The Avada Builder plugin for WordPress is vulnerable to time-based SQL Injection via the \u2018product_order\u2019 parameter in all versions up to, and in...", "creation_timestamp": "2026-05-13T12:32:06.326341Z"}, {"uuid": "cd0d687c-c329-4f74-b010-78ec55019078", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4782", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlqdbejomm2v", "content": "CVE-2026-4782 - Avada Builder\nCVE ID : CVE-2026-4782\n \n Published : May 13, 2026, 9:26 a.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : The Avada Builder plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.15.2 via the 'fusion_get_svg...", "creation_timestamp": "2026-05-13T12:42:06.764402Z"}, {"uuid": "4f9b82ee-9b43-493e-96dc-d850488e8836", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4782", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlqjfyf55y2h", "content": "CVE-2026-4782 fusion-builder (CVSS Score 6.5) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-13T14:32:06.160270Z"}, {"uuid": "f4328894-34a9-4e0b-b0cc-d31a09a64649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4798", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlqpcm7xqe2z", "content": "\ud83d\udfe0 CVE-2026-4798 - High (7.5)\n\nThe Avada Builder plugin for WordPress is vulnerable to time-based SQL Injection via the \u2018produ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-4798/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-13T16:19:46.901808Z"}, {"uuid": "b77a7117-f1ac-451a-acd3-cc10bad013d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4798", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mlrlmhfveb2a", "content": "Avada Builder: 2 vulnerabilidades cr\u00edticas en 1M de sitios\n\n\u00bfTu sitio tiene Avada Builder sin actualizar? Las CVE-2026-4798 y CVE-2026-4782 exponen 1 mill\u00f3n de WordPress a SQL injection y robo de wp-config. Actua...\n\n#avadabuilder #cve20264798 #inyecci\u00f3nsql #wordpressseguridad #fusionbuilder", "creation_timestamp": "2026-05-14T00:44:08.625327Z"}, {"uuid": "f48f8a92-7f52-40bd-9127-f351e21ce51b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4782", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mlrlmhfveb2a", "content": "Avada Builder: 2 vulnerabilidades cr\u00edticas en 1M de sitios\n\n\u00bfTu sitio tiene Avada Builder sin actualizar? Las CVE-2026-4798 y CVE-2026-4782 exponen 1 mill\u00f3n de WordPress a SQL injection y robo de wp-config. Actua...\n\n#avadabuilder #cve20264798 #inyecci\u00f3nsql #wordpressseguridad #fusionbuilder", "creation_timestamp": "2026-05-14T00:44:08.784235Z"}, {"uuid": "829bc65c-110e-4017-afd2-9aaec4233290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/fdoemges.bsky.social/post/3mlsudwc6ps2j", "content": "FreeBSD CVE-2026-4747. Anthropic: \"unauthenticated root from anywhere on the internet.\" FreeBSD-Advisory: \"remote code execution by an authenticated user.\" NVD: \"Privileges Required: Low.\" Man braucht ein g\u00fcltiges Kerberos-Ticket. Anthropic hat gelogen.", "creation_timestamp": "2026-05-14T12:53:55.825760Z"}, {"uuid": "1bced215-063a-4871-b60d-89d8e9327734", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/fdoemges.bsky.social/post/3mlsudwcbnk2j", "content": "FreeBSD CVE-2026-4747. Anthropic: \"unauthenticated root from anywhere on the internet.\" FreeBSD-Advisory: \"remote code execution by an authenticated user.\" NVD: \"Privileges Required: Low.\" Man braucht ein g\u00fcltiges Kerberos-Ticket. Anthropic hat gelogen.", "creation_timestamp": "2026-05-14T12:53:56.637179Z"}, {"uuid": "8dc2c663-05e4-4116-9c0a-32c7f8e6a6de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/fdoemges.bsky.social/post/3mlsudwccms2j", "content": "FreeBSD CVE-2026-4747. Anthropic: \"unauthenticated root from anywhere on the internet.\" FreeBSD-Advisory: \"remote code execution by an authenticated user.\" NVD: \"Privileges Required: Low.\" Man braucht ein g\u00fcltiges Kerberos-Ticket. Anthropic hat gelogen.", "creation_timestamp": "2026-05-14T12:53:57.244460Z"}, {"uuid": "723d81ca-b5d7-45e4-b16a-e8d8b2b11668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/fdoemges.bsky.social/post/3mlsudwccmt2j", "content": "FreeBSD CVE-2026-4747. Anthropic: \"unauthenticated root from anywhere on the internet.\" FreeBSD-Advisory: \"remote code execution by an authenticated user.\" NVD: \"Privileges Required: Low.\" Man braucht ein g\u00fcltiges Kerberos-Ticket. Anthropic hat gelogen.", "creation_timestamp": "2026-05-14T12:53:57.804299Z"}, {"uuid": "04dd43a1-412c-481d-a60f-6038d4219450", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/fdoemges.bsky.social/post/3mlsudwcdm42j", "content": "FreeBSD CVE-2026-4747. Anthropic: \"unauthenticated root from anywhere on the internet.\" FreeBSD-Advisory: \"remote code execution by an authenticated user.\" NVD: \"Privileges Required: Low.\" Man braucht ein g\u00fcltiges Kerberos-Ticket. Anthropic hat gelogen.", "creation_timestamp": "2026-05-14T12:56:11.386933Z"}, {"uuid": "ce5a0f29-3a52-4f45-bd5b-2db702f72f9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/fdoemges.bsky.social/post/3mlsudwcdm52j", "content": "FreeBSD CVE-2026-4747. Anthropic: \"unauthenticated root from anywhere on the internet.\" FreeBSD-Advisory: \"remote code execution by an authenticated user.\" NVD: \"Privileges Required: Low.\" Man braucht ein g\u00fcltiges Kerberos-Ticket. Anthropic hat gelogen.", "creation_timestamp": "2026-05-14T12:56:11.930540Z"}, {"uuid": "9f32bf83-d963-4e90-a73d-afa6f8c293f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/fdoemges.bsky.social/post/3mlsudwcdm62j", "content": "FreeBSD CVE-2026-4747. Anthropic: \"unauthenticated root from anywhere on the internet.\" FreeBSD-Advisory: \"remote code execution by an authenticated user.\" NVD: \"Privileges Required: Low.\" Man braucht ein g\u00fcltiges Kerberos-Ticket. Anthropic hat gelogen.", "creation_timestamp": "2026-05-14T12:56:20.140338Z"}, {"uuid": "a1b82baf-1b97-4f9c-9c88-2f4596bb8d05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/fdoemges.bsky.social/post/3mlsudwcdma2j", "content": "FreeBSD CVE-2026-4747. Anthropic: \"unauthenticated root from anywhere on the internet.\" FreeBSD-Advisory: \"remote code execution by an authenticated user.\" NVD: \"Privileges Required: Low.\" Man braucht ein g\u00fcltiges Kerberos-Ticket. Anthropic hat gelogen.", "creation_timestamp": "2026-05-14T12:58:34.828876Z"}, {"uuid": "3880d8b7-9e59-4e9d-800b-09c97bc74ea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/fdoemges.bsky.social/post/3mlsudwcdmc2j", "content": "FreeBSD CVE-2026-4747. Anthropic: \"unauthenticated root from anywhere on the internet.\" FreeBSD-Advisory: \"remote code execution by an authenticated user.\" NVD: \"Privileges Required: Low.\" Man braucht ein g\u00fcltiges Kerberos-Ticket. Anthropic hat gelogen.", "creation_timestamp": "2026-05-14T13:00:50.000853Z"}, {"uuid": "d0f4ac48-e6b0-4abd-9e34-8975d02b4447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/fdoemges.bsky.social/post/3mlsudwcelk2j", "content": "FreeBSD CVE-2026-4747. Anthropic: \"unauthenticated root from anywhere on the internet.\" FreeBSD-Advisory: \"remote code execution by an authenticated user.\" NVD: \"Privileges Required: Low.\" Man braucht ein g\u00fcltiges Kerberos-Ticket. Anthropic hat gelogen.", "creation_timestamp": "2026-05-14T13:00:52.187531Z"}, {"uuid": "d4f4182e-0bfe-4277-a285-76e3a9b2b0d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4798", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mm5m3wgr5v2h", "content": "CVE-2026-4798: Avada Builder expone 1 mill\u00f3n de sitios\n\nCVE-2026-4798 expone 1 mill\u00f3n de sitios WordPress a robo de credenciales v\u00eda Avada Builder. \u00bfTu sitio us\u00f3 WooCommerce alguna vez? Verific\u00e1 ahora y actua...\n\n#cve20264798 #avadabuilder #sqlinjection #wordfence #wordpressvulnerabilidades", "creation_timestamp": "2026-05-18T19:24:44.321095Z"}, {"uuid": "9fcc8e68-4a13-464b-a01f-bb4cab95733b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47310", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mm6zsxod2n2o", "content": "CVE-2026-47310 - Samsung Escargot After Free Pointer Manipulation\nCVE ID : CVE-2026-47310\n \n Published : May 19, 2026, 7:16 a.m. | 56\u00a0minutes ago\n \n Description : Use after free vulnerability in Samsung Open Source Escargot allows Pointer Manipulation.\n\nThis issue affects Esca...", "creation_timestamp": "2026-05-19T09:02:56.028789Z"}, {"uuid": "e1cb30f0-9524-4d4e-8351-686a5f5cf7d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47311", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mm72cduo6k2i", "content": "CVE-2026-47311 - Samsung Open Source Escargot Heap Buffer Overflow\nCVE ID : CVE-2026-47311\n \n Published : May 19, 2026, 7:16 a.m. | 56\u00a0minutes ago\n \n Description : Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.\n\nThis issue aff...", "creation_timestamp": "2026-05-19T09:11:32.144921Z"}, {"uuid": "ef7f6476-c72d-43ee-9542-599f32f825a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47309", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mm72lcczzl2o", "content": "CVE-2026-47309 - Samsung Open Source Escargot Uncontrolled Recursion Deserialization Vulnerability\nCVE ID : CVE-2026-47309\n \n Published : May 19, 2026, 7:16 a.m. | 56\u00a0minutes ago\n \n Description : Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Overs...", "creation_timestamp": "2026-05-19T09:16:32.318780Z"}, {"uuid": "4a289024-f644-403d-9e00-e299a0553628", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4786", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mm7ds54rad2l", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-4786 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/526 #AWS #Lambda #Security #CVE #DevOps #SecOps", "creation_timestamp": "2026-05-19T12:01:25.330044Z"}, {"uuid": "53f368bd-6c84-4b2d-955b-9b26d5ad2f65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47310", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mm7dvndnbf2o", "content": "Samsung Open Source Escargot\u306euse-after-free\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u30dd\u30a4\u30f3\u30bf\u64cd\u4f5c\u304c\u53ef\u80fd\u306b\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-47310 CVSS 7.8 | HIGH", "creation_timestamp": "2026-05-19T12:03:23.451117Z"}, {"uuid": "5a1124b4-3926-4478-ae4b-a3c4e108a04a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47323", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mm7tylplja2s", "content": "CVE-2026-47323: Apache Camel: Camel-CXF Message Header Injection via Missing Inbound Filtering", "creation_timestamp": "2026-05-19T16:51:21.929633Z"}, {"uuid": "e9a4477e-bda9-4d52-9fc2-c2c511c493e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47358", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mm7xtxrdfg2z", "content": "\ud83d\udfe0 CVE-2026-47358 - High (7.5)\n\nTerrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via external URL...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47358/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-19T18:00:22.702830Z"}, {"uuid": "ba809a73-f2eb-4e57-9b59-1a7bc3d24718", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47356", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mm7xu6sefz2e", "content": "\ud83d\udfe0 CVE-2026-47356 - High (7.5)\n\nTerrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the webhook_...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47356/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-19T18:00:29.737641Z"}, {"uuid": "15a8fcbc-f3f2-4d69-a3f0-5bee0db3385e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47357", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mm7xufh4x52n", "content": "\ud83d\udfe0 CVE-2026-47357 - High (7.5)\n\nTerrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the remote_u...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47357/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-19T18:00:36.549561Z"}, {"uuid": "4571f923-b5be-4756-a5f7-3389c4c76573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47107", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mma3caufwf2z", "content": "\ud83d\udd34 CVE-2026-47107 - Critical (9.6)\n\nWindmill prior to 1.703.2 contains an incorrect default permissions vulnerability in nsjail sandb...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47107/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-19T19:02:03.823197Z"}, {"uuid": "bc204d84-30e5-4409-b688-fb7d57146055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47358", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmaanshoko2e", "content": "CVE-2026-47358 - Terrascan Server-Side Request Forgery (SSRF)\nCVE ID : CVE-2026-47358\n \n Published : May 19, 2026, 5:16 p.m. | 58\u00a0minutes ago\n \n Description : Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via external URL resolution in upload...", "creation_timestamp": "2026-05-19T20:37:58.317842Z"}, {"uuid": "8412ceec-9d37-47f2-a68f-c1a36d7b0388", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47356", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mma7sciyex2o", "content": "CVE-2026-47356 - Terrascan SSRF\nCVE ID : CVE-2026-47356\n \n Published : May 19, 2026, 5:16 p.m. | 58\u00a0minutes ago\n \n Description : Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the webhook_url parameter in the file scan endpoint (POST /v1/{...", "creation_timestamp": "2026-05-19T20:22:35.891616Z"}, {"uuid": "ab10aec2-91ea-4e28-951a-e35b91453a09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47107", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmaavi3n5u2p", "content": "CVE-2026-47107 - Windmill\nCVE ID : CVE-2026-47107\n \n Published : May 19, 2026, 4:42 p.m. | 1\u00a0hour, 31\u00a0minutes ago\n \n Description : Windmill prior to 1.703.2 contains an incorrect default permissions vulnerability in nsjail sandbox configuration files where /etc is bind-mounted...", "creation_timestamp": "2026-05-19T20:42:16.311155Z"}, {"uuid": "9c2d0a8c-572a-4aab-9892-ff2668e57b84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47357", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmab6gl2jh2r", "content": "CVE-2026-47357 - Terrascan Server-Side Request Forgery (SSRF)\nCVE ID : CVE-2026-47357\n \n Published : May 19, 2026, 5:16 p.m. | 58\u00a0minutes ago\n \n Description : Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the remote_url parameter in the r...", "creation_timestamp": "2026-05-19T20:47:18.186037Z"}, {"uuid": "6afa1b06-b2f3-4562-aeea-363703bcebc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47100", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmalyaax6t2w", "content": "\ud83d\udfe0 CVE-2026-47100 - High (7.5)\n\nFunnel Builder for WooCommerce Checkout prior to 3.15.0.3 contains a missing authorization vulner...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47100/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-20T00:00:44.115995Z"}, {"uuid": "3fb4af7a-26ec-4023-b421-66fa72adfa2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47100", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mmalybp2kj2w", "content": "\ud83d\udfe0 CVE-2026-47100 - High (7.5)\n\nFunnel Builder for WooCommerce Checkout prior to 3.15.0.3 contains a missing authorization vulner...\n\nhttps://www.themasherwire.com/vulnerability/CVE-2026-47100/\n\n#infosec #potatosecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-20T00:01:27.947301Z"}, {"uuid": "cd2f4a7e-b06e-4e27-8e51-e9c8b84771cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47784", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmbj6q3c4e2k", "content": "CVE-2026-47784 - Memcached Timing-Attack in SASL Password Database Authentication\nCVE ID : CVE-2026-47784\n \n Published : May 20, 2026, 7:16 a.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : In memcached before 1.6.42, password data for SASL password database authentication has a t...", "creation_timestamp": "2026-05-20T08:43:15.970846Z"}, {"uuid": "a85b1dda-8e88-4e0d-8612-6b163ddbdbd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47732", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmbpcmjit42m", "content": "\ud83d\udd10 CVE-2026-47732: Sandbox: multiple `__toString()` policy bypasses via unguarded string coercion points\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-47732-sandbox-multiple-tostring-policy-bypasses-via-unguarded-string-coercion-points", "creation_timestamp": "2026-05-20T10:33:02.500520Z"}, {"uuid": "308b624b-009d-41be-8066-d42165c2a1d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47730", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmbpc6qxek26", "content": "\ud83d\udd10 CVE-2026-47730: XSS in profiler HtmlDumper via unescaped template and profile names\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-47730-xss-in-profiler-htmldumper-via-unescaped-template-and-profile-names", "creation_timestamp": "2026-05-20T10:32:34.453923Z"}, {"uuid": "d323e943-791e-4cdf-a72c-8f57915a633e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47212", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmbqxgdjg72y", "content": "\ud83d\udd10 CVE-2026-47212: Twilio Notifier Webhook Parser Never Verifies the X-Twilio-Signature HMAC: Unauthenticated Webhook Event Injection\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-47212-twilio-notifier-webhook-parser-never-verifies-the-x-twilio-signature-hmac-unauthenticated-webhook-event-injection", "creation_timestamp": "2026-05-20T11:02:20.847497Z"}, {"uuid": "64efbfa6-d239-4562-9a72-318142eee865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47783", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mmbtqvnqvt2k", "content": "\u8106\u5f31\u6027\uff08CVE-2023-38545\uff09\u306b\u3088\u308a\u3001OpenSSH 9.3p2\u4ee5\u524d\u3067\u306f\u3001SSH\u63a5\u7d9a\u306e\u78ba\u7acb\u6642\u306b\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u304c\u767a\u751f\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u653b\u6483\u8005\u306f\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u2026\nCVE-2026-47783 CVSS 8.1 | HIGH", "creation_timestamp": "2026-05-20T11:52:24.528588Z"}, {"uuid": "be8cee8b-3998-497c-b020-d2723ee25c48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47212", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmc3qc4eg22q", "content": "\ud83d\udd17 CVE : CVE-2026-45070, CVE-2026-45077, CVE-2026-45304, CVE-2026-45305, CVE-2026-45753, CVE-2026-45754, CVE-2026-45755, CVE-2026-45756, CVE-2026-46626, CVE-2026-47212", "creation_timestamp": "2026-05-20T14:15:14.032320Z"}, {"uuid": "778c0159-dc37-4f86-8d42-c77ec02fea35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47164", "type": "seen", "source": "https://gist.github.com/Atomics-hub/546bf5d8d27b37858eec964a75f37206", "content": "# Vaultwarden SSO existing-user binding skips the IdP `email_verified` check (CVE-2026-47164)\n\n**Advisory:** [GHSA-6x5c-84vm-5j56](https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-6x5c-84vm-5j56)\n**CVE:** CVE-2026-47164\n**Severity:** HIGH \u2014 CVSS 7.7 (`AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L`)\n**CWE:** CWE-284 (Improper Access Control)\n**Affected:** vaultwarden \u2264 1.35.8 \u2014 **Fixed in [1.36.0](https://github.com/dani-garcia/vaultwarden/releases/tag/1.36.0)**\n**Credits:** [@ch1nhpd](https://github.com/ch1nhpd) (original reporter, 2026-03-22) and [@Atomics-hub](https://github.com/Atomics-hub) (independent reporter, 2026-04-29). I'm Atomics-hub. ch1nhpd was first by about five weeks; my submission was triaged as a duplicate and I was credited on the published advisory.\n\nThis writeup is the independent-reporter perspective. I didn't see ch1nhpd's report when I submitted \u2014 Vaultwarden's pre-publication advisories aren't visible to non-collaborators, and the bug had not yet been disclosed when I started auditing. That's the structural risk of being second on a fresh source audit; I'll come back to it at the end.\n\n## TL;DR\n\nVaultwarden's OIDC SSO login flow has two paths after the IdP callback: a new-user-creation branch and an existing-user-binding branch. The new-user branch enforces the IdP's `email_verified` claim. The existing-user branch, in versions \u2264 1.35.8, did not.\n\nIf an attacker can register an account at the configured IdP claiming a victim's email address \u2014 with `email_verified` set to `false` or `null` \u2014 Vaultwarden's existing-user branch will bind the attacker's IdP identity to the victim's pre-existing Vaultwarden account and issue a session token for that account. The documented \"safe\" defaults (`SSO_SIGNUPS_MATCH_EMAIL=true`, `SSO_ALLOW_UNKNOWN_EMAIL_VERIFICATION=false`) do not stop this. 2FA on the victim account does stop it; the attack is gated by Vaultwarden's existing 2FA challenge.\n\n## The bug\n\nAll line numbers below are from [`src/api/identity.rs`](https://github.com/dani-garcia/vaultwarden/blob/62748100f04178b9b2df7f9fd8f9884fab59fbd8/src/api/identity.rs) at commit `62748100` \u2014 the upstream `main` at the time I submitted (2026-04-28).\n\nThe SSO login handler resolves the incoming IdP identity by:\n\n1. Looking up an existing `SsoUser` by stable identifier (issuer + subject).\n2. If none, falling back to looking up a local user by the IdP-supplied email.\n\n```rust\n// src/api/identity.rs:204-234\nlet user_with_sso = match SsoUser::find_by_identifier(&user_infos.identifier, conn).await {\n    None => match SsoUser::find_by_mail(&user_infos.email, conn).await {\n        None => None,\n        Some((user, Some(_))) => err_silent!(\"Existing SSO user with same email\", ...),\n        Some((user, None)) if user.private_key.is_some() && !CONFIG.sso_signups_match_email() =>\n            err_silent!(\"Existing non SSO user with same email\", ...),\n        Some((user, None)) => Some((user, None)),   // existing-user binding\n    },\n    Some((user, sso_user)) => Some((user, Some(sso_user))),\n};\n```\n\nThe path that returns `Some((user, None))` binds the IdP identity to any existing Vaultwarden user that matches by email, as long as `sso_signups_match_email()` is true (the default).\n\nThen a second `match` decides how to finish the login. The new-user branch (lines 239-273) checks `email_verified`:\n\n```rust\n// src/api/identity.rs:249-264\nmatch user_infos.email_verified {\n    None if !CONFIG.sso_allow_unknown_email_verification() => err!(\n        \"Your provider does not send email verification status...\"\n    ),\n    Some(false) => err!(\n        \"You need to verify your email with your provider before you can log in\"\n    ),\n    _ => (),\n}\n```\n\nThe existing-user branch (lines 283-307) does not. It goes straight to `twofactor_auth` and, if the victim has no 2FA, hands out a session bound to the victim's UUID:\n\n```rust\n// src/api/identity.rs:283-307\nSome((mut user, sso_user)) => {\n    let mut device = get_device(&data, conn, &user).await?;\n    let twofactor_token = twofactor_auth(&mut user, &data, &mut device, ip, client_version, conn).await?;\n    // ... no email_verified check anywhere on this branch ...\n    if user.email != user_infos.email {\n        if CONFIG.mail_enabled() {\n            mail::send_sso_change_email(&user_infos.email).await?;\n        }\n        info!(\"User {} email changed in SSO provider from {} to {}\", user.uuid, user.email, user_infos.email);\n    }\n    (user, device, twofactor_token, sso_user)\n}\n```\n\nThe `user.email != user_infos.email` notification at line 298 never fires for this attack because the IdP claim has to match an existing Vaultwarden email exactly for the lookup at line 205 to succeed.\n\nThe maintainer's own warning on `SSO_ALLOW_UNKNOWN_EMAIL_VERIFICATION` in [`src/config.rs:809`](https://github.com/dani-garcia/vaultwarden/blob/62748100f04178b9b2df7f9fd8f9884fab59fbd8/src/config.rs#L809) reads:\n\n> Allow unknown email verification status |> Allowing this with `SSO_SIGNUPS_MATCH_EMAIL=true` open potential account takeover.\n\nThe threat model was already understood; the warning was conditioned on the unsafe combination. The bug here defeats the documented safe default \u2014 even with `SSO_ALLOW_UNKNOWN_EMAIL_VERIFICATION=false`, the existing-user branch never reaches the gate.\n\n## 2FA mitigation\n\n`twofactor_auth` at line 286 is the only check between the existing-user binding and session issuance. Its early-return for users without 2FA is what makes this exploitable:\n\n```rust\n// src/api/identity.rs:740-746\nlet twofactors = TwoFactor::find_by_user(&user.uuid, conn).await;\n\n// No twofactor token if twofactor is disabled\nif twofactors.is_empty() {\n    enforce_2fa_policy(user, &user.uuid, device.atype, &ip.ip, conn).await?;\n    return Ok(None);\n}\n```\n\nA victim with any usable 2FA method blocks at line 758 (\"No enabled and usable two factor providers are available\") or line 777 (\"2FA token not provided\"). A 2FA-protected victim is not exploitable through this path.\n\nVaultwarden does not enforce 2FA by default, so whether this mitigation applies depends on the individual user.\n\n## Comparison with upstream Bitwarden\n\nBitwarden's official server does not bind SSO to an existing user via IdP email alone. It requires an invite-acceptance round-trip: an org admin invites the email, the recipient clicks an emailed link, the row goes from `Invited` to `Accepted`, and only then can SSO attach.\n\nThe relevant block lives in [`bitwarden_license/src/Sso/Controllers/AccountController.cs`](https://github.com/bitwarden/server/blob/main/bitwarden_license/src/Sso/Controllers/AccountController.cs) and is prefaced with a comment header titled \"Critical Code Check Here\":\n\n```csharp\n// bitwarden_license/src/Sso/Controllers/AccountController.cs:533-562\nOrganizationUser guaranteedOrgUser = possibleOrgUser\n    ?? throw new Exception(_i18nService.T(\"UserAlreadyExistsInviteProcess\"));\n\n/*\n * ----------------------------------------------------\n *              Critical Code Check Here\n *\n * We want to ensure a user is not in the invited state\n * explicitly. User's in the invited state should not\n * be able to authenticate via SSO.\n *\n * See internal doc called \"Added Context for SSO Login\n * Flows\" for further details.\n * ----------------------------------------------------\n */\nif (guaranteedOrgUser.Status == OrganizationUserStatusType.Invited)\n{\n    throw new Exception(\n        _i18nService.T(\"AcceptInviteBeforeUsingSSO\", organization.DisplayName()));\n}\n\nEnforceAllowedOrgUserStatus(\n    guaranteedOrgUser.Status,\n    allowedStatuses: [\n        OrganizationUserStatusType.Accepted,\n        OrganizationUserStatusType.Confirmed\n    ],\n    organization.DisplayName());\n```\n\nEmail ownership is proved by the invite-acceptance round-trip, so the `email_verified` IdP claim is not load-bearing. Vaultwarden's existing-user branch performs neither check \u2014 the binding succeeds based purely on the IdP-supplied email matching a row in the `users` table.\n\nI bring this up not as a direct port suggestion \u2014 Vaultwarden is an independent reimplementation and has its own constraints \u2014 but because the upstream's comment (\"Critical Code Check Here\") is exactly the comment a Vaultwarden maintainer would want next to the existing-user branch.\n\n## PoC\n\nI reproduced this against `vaultwarden/server:latest` on 2026-04-28 with Keycloak as the IdP. The reproducer (`docker/run_poc.sh`):\n\n1. Provisions a Vaultwarden OIDC client in Keycloak via the admin API.\n2. Starts Vaultwarden with the documented \"safe\" defaults: `SSO_ENABLED=true`, `SSO_SIGNUPS_MATCH_EMAIL=true`, `SSO_ALLOW_UNKNOWN_EMAIL_VERIFICATION=false`.\n3. Registers victim `victim@example.com` in Vaultwarden via password registration. No 2FA.\n4. Creates Keycloak user `attacker` with `email=victim@example.com`, `emailVerified=false`.\n5. Drives the OIDC flow attacker-side and exchanges the code at `/identity/connect/token`.\n\nThe token-exchange response on the affected build:\n\n```\n=== access_token claims (decoded) ===\n  \"sub\": \"97e87705-2166-4d84-9090-088f0eb1d13c\",   <- victim's user UUID\n  \"name\": \"Victim\",\n  \"email\": \"victim@example.com\",\n  \"email_verified\": true,                          <- Vaultwarden asserts true; IdP claim was false\n  \"device\": \"00000000-0000-0000-0000-000000000001\" <- attacker's newly-registered device\n\n=== Capability probes ===\n  \u2713 read profile (PII)                             HTTP 200\n  \u2713 read full vault sync (encrypted ciphers)       HTTP 200\n  \u2713 list 2FA providers                             HTTP 200\n  \u2713 list authorized devices                        HTTP 200\n  \u2713 list emergency-access trustees                 HTTP 200\n\n  profile.id == victim's user UUID\n  profile.email == victim@example.com\n```\n\nThe token-exchange response also returns the victim's `PrivateKey` envelope (see [`src/api/identity.rs:511`](https://github.com/dani-garcia/vaultwarden/blob/62748100f04178b9b2df7f9fd8f9884fab59fbd8/src/api/identity.rs#L511)), encrypted under a key derived from the victim's master password. Plaintext vault contents are not directly readable from the response \u2014 they remain encrypted under that master-key envelope. The encrypted material is suitable for offline brute-force against weak master passwords. The default KDF in Vaultwarden is PBKDF2-SHA256 with `CLIENT_KDF_ITER_DEFAULT = 600_000` ([`src/db/models/user.rs:106`](https://github.com/dani-garcia/vaultwarden/blob/62748100f04178b9b2df7f9fd8f9884fab59fbd8/src/db/models/user.rs#L106)); Argon2id is selectable per-user. Brute-force economics scale accordingly.\n\nNegative control: re-running the PoC with `SSO_SIGNUPS_MATCH_EMAIL=false` blocks the attack at the token-exchange step with `{\"message\":\"Existing non SSO user with same email\"}`. This is the maintainer's documented mitigation knob; the bug is that the safe default does not invoke it.\n\n## Impact past the initial session\n\n- **Session lifetime.** 2-hour access token plus 30-day refresh token bound to the victim's UUID, per `DEFAULT_ACCESS_VALIDITY` and `DEFAULT_REFRESH_VALIDITY` in [`src/auth.rs:30-32`](https://github.com/dani-garcia/vaultwarden/blob/62748100f04178b9b2df7f9fd8f9884fab59fbd8/src/auth.rs#L30-L32). I did not find code that re-validates IdP session state on refresh; the refresh window appears to outlive the original IdP login.\n- **Persistent SSO binding.** A new `SsoUser` row linking the attacker's IdP subject to the victim's user UUID is persisted by `sso::redeem` ([`src/api/identity.rs:313`](https://github.com/dani-garcia/vaultwarden/blob/62748100f04178b9b2df7f9fd8f9884fab59fbd8/src/api/identity.rs#L313)). The attacker can re-authenticate via SSO until that row is removed.\n- **Org-Owner privilege escalation.** If the victim is an `Owner` of any Vaultwarden organization, the hijacked session passes the role-edit gate at [`src/api/core/organizations.rs:1565-1570`](https://github.com/dani-garcia/vaultwarden/blob/62748100f04178b9b2df7f9fd8f9884fab59fbd8/src/api/core/organizations.rs#L1565-L1570):\n\n  ```rust\n  if new_type != member_to_edit.atype\n      && (member_to_edit.atype >= MembershipType::Admin || new_type >= MembershipType::Admin)\n      && headers.membership_type != MembershipType::Owner\n  {\n      err!(\"Only Owners can grant and remove Admin or Owner privileges\")\n  }\n  ```\n\n  The session caller is an Owner, so the check passes, and the attacker can promote their attacker-side membership entry to `Owner`. Owner role on the org survives the hijacked session.\n- **Emergency-access grant.** Vaultwarden supports emergency-access ([`src/api/core/emergency_access.rs`](https://github.com/dani-garcia/vaultwarden/blob/62748100f04178b9b2df7f9fd8f9884fab59fbd8/src/api/core/emergency_access.rs)). A hijacked session can create a grant naming the attacker as a recovery contact; after the configured wait window elapses without the victim disabling it, recovery completes outside the original session window.\n\n## Recon\n\nOne unauthenticated endpoint lowers the targeting cost: [`POST /organizations/domain/sso/verified`](https://github.com/dani-garcia/vaultwarden/blob/62748100f04178b9b2df7f9fd8f9884fab59fbd8/src/api/core/organizations.rs#L919-L941) takes an email and returns the matching organization's name and identifier if SSO is configured for it (or a fake-identifier sentinel otherwise). With a victim email, an attacker can confirm a target Vaultwarden instance has SSO enabled and identify the org before any IdP-side activity. The endpoint is intentionally unauthenticated by design (clients need it pre-login to discover SSO config), but it's worth noting as part of the realistic attack surface.\n\nI had originally framed `POST /accounts/prelogin` as a clean email-enumeration primitive. Rechecking [`src/api/core/accounts.rs:1236-1250`](https://github.com/dani-garcia/vaultwarden/blob/62748100f04178b9b2df7f9fd8f9884fab59fbd8/src/api/core/accounts.rs#L1236-L1250): Vaultwarden returns `(CLIENT_KDF_TYPE_DEFAULT, CLIENT_KDF_ITER_DEFAULT, None, None)` for unknown emails, matching what a freshly-registered default-KDF user would return. So it's *not* a clean enumeration primitive \u2014 it only distinguishes users who have customized their KDF (changed iteration count, switched to Argon2id, etc.) from \"unknown email OR default-KDF user.\" That's a much weaker signal than I claimed in the original submission, and against the population of Vaultwarden users likely to be on default settings it's near-useless. I'm calling that out explicitly because it was in my draft and I want the public version to be honest.\n\n## CVSS framing\n\nCVSS:3.1 `AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L` \u2014 7.7 HIGH, as published.\n\n`AC:H` reflects two preconditions: the attacker needs an IdP that allows registering an identity claiming the victim's email with `email_verified` either `false` or unset, and the victim must not have Vaultwarden 2FA configured. Both can be tightened by the operator (use an IdP that strongly enforces domain ownership; require 2FA), but the second one isn't actionable from the Vaultwarden side at config-write time.\n\n`C:H` covers PII plus retrieval of the encrypted vault envelope.\n`I:H` covers the device-registration, emergency-access, and org-Owner-promotion vectors.\n`A:L` is the published score's nod to the persistent SSO binding and the operational disruption of a confirmed-owner switch.\n\nMy original draft scored this as `A:N` and total 7.5; the published 7.7 with `A:L` is the advisor's framing and I'm not going to argue with it.\n\n## Fix\n\nThe 1.36.0 patch [moves the `email_verified` gate up into the email-resolution step itself](https://github.com/dani-garcia/vaultwarden/blob/1.36.0/src/api/identity.rs#L233-L259), so both branches enter the second `match` with the email-verification invariant already enforced:\n\n```rust\n// src/api/identity.rs (1.36.0):233-259\nSome((user, None)) => match user_infos.email_verified {\n    None if !CONFIG.sso_allow_unknown_email_verification() => {\n        err_silent!(\"Email verification status is unknown\", ...)\n    }\n    Some(false) => {\n        err_silent!(\"Email is not verified by the SSO provider\", ...)\n    }\n    _ => Some((user, None)),\n},\n```\n\nThis is structurally tighter than the option I proposed in my submission (duplicate the check inside the existing-user branch before `twofactor_auth`). Pushing the check up into the resolution step makes it impossible to reach either downstream branch without having passed the gate, which is exactly the right shape \u2014 checks at the boundary, not at the consumer.\n\n## Disclosure timeline\n\n- **2026-04-28 22:34Z**: Submitted GHSA-j4j8-gpvj-7fqr to Vaultwarden with PoC and audit notes.\n- **2026-04-28 22:38Z**: Daniel Garc\u00eda added [@BlackDex](https://github.com/BlackDex) as a collaborator on the report.\n- **2026-05-03 12:54Z**: Vaultwarden [1.36.0](https://github.com/dani-garcia/vaultwarden/releases/tag/1.36.0) released. Release notes list \"SSO existing-user binding\" among the security fixes and reference both GHSA-j4j8-gpvj-7fqr and GHSA-6x5c-84vm-5j56, noting \"These are private for now, pending CVE assignment.\" (At this point both my report and ch1nhpd's still pointed at distinct GHSA IDs; the merge to single CVE happened at publication.)\n- **2026-05-17 18:57Z**: Daniel closed my advisory as a duplicate of ch1nhpd's 2026-03-22 report, and offered to add me as an independent-reporter credit on the public advisory.\n- **2026-05-19 21:27Z**: [GHSA-6x5c-84vm-5j56](https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-6x5c-84vm-5j56) / CVE-2026-47164 published.\n- **2026-05-19 ~22:30Z**: Accepted the credit invite. Atomics-hub now appears in structured Credits alongside ch1nhpd on the published advisory.\n\nNo bounty \u2014 Vaultwarden does not operate a bug bounty program. The artifact is the public CVE credit.\n\n## What worked, what didn't\n\nWhat worked: a fresh source audit of `src/api/identity.rs` flagged the asymmetric placement of the `email_verified` check across the two branches almost immediately. The check existed on one path but not the other; the maintainer's config-comment warning on `SSO_ALLOW_UNKNOWN_EMAIL_VERIFICATION` confirmed the threat model was already understood. That mismatch was the lead. End-to-end PoC against the live Docker image confirmed it before submission.\n\nWhat didn't: I missed an obvious check that I'd add to my pre-submission gate from now on. GitHub Security Advisories has a public Advisories tab per repo. The list of *published* advisories is searchable, and `dani-garcia/vaultwarden` had no public advisory for this bug class at the time. But pre-publication advisories (private to the maintainer) can also include a window where collaborator activity is visible in unusual ways \u2014 a maintainer adding a collaborator, an issue or PR getting unusual gating, a release notes draft appearing. The 2026-04-28 22:38Z addition of @BlackDex as a collaborator on my own report, four minutes after I submitted, is consistent with maintainer behaviour around an existing private advisory. I should have looked harder at the activity timeline of the repo before drafting the submission.\n\nFor OSS targets with active GHSA usage, the lesson I'm banking: before drafting a submission, spend ten minutes on the project's commit graph, recent collaborator additions, and release notes drafts. Five weeks is a long gap, but it's also evidence that ch1nhpd's report sat in private triage for that whole window. The signal was probably in the public repo activity if I'd known to look.\n\nThe other thing I'm taking away from this: the AC:H precondition tree is real and exploitable in practice. Self-hosted Keycloak with open registration is common. Vaultwarden users without 2FA are common. The intersection is smaller than either set alone, but it's not zero, and the impact-on-success is genuinely high. Operators running Vaultwarden with SSO should be on 1.36.0 or later. Operators running Vaultwarden with SSO and a permissive IdP should set `SSO_SIGNUPS_MATCH_EMAIL=false` regardless of version \u2014 the fix relies on the IdP truthfully reporting `email_verified`, and an IdP that can be made to lie about that defeats the fix the same way it defeated the safe default.\n\n---\n\n*Reporter: [@Atomics-hub](https://github.com/Atomics-hub). Co-reporter who got there first: [@ch1nhpd](https://github.com/ch1nhpd). Advisory: [GHSA-6x5c-84vm-5j56](https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-6x5c-84vm-5j56) / CVE-2026-47164. Affected commit: [`62748100`](https://github.com/dani-garcia/vaultwarden/tree/62748100f04178b9b2df7f9fd8f9884fab59fbd8). Fixed in [1.36.0](https://github.com/dani-garcia/vaultwarden/releases/tag/1.36.0).*\n", "creation_timestamp": "2026-05-20T14:58:37.000000Z"}, {"uuid": "a6d2da09-1781-4011-bd04-6fca7a761d6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47068", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmc7sv2h5b2h", "content": "CVE-2026-47068 - Cross-session PubSub topic injection via URL parameter in phoenix_storybook\nCVE ID : CVE-2026-47068\n \n Published : May 20, 2026, 1:35 p.m. | 39\u00a0minutes ago\n \n Description : Authorization Bypass Through User-Controlled Key vulnerability in phenixdigital phoenix...", "creation_timestamp": "2026-05-20T15:28:18.415852Z"}, {"uuid": "ff052514-e4f2-4aed-9cc1-33cfb52dff14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47668", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-47668.yaml", "content": "", "creation_timestamp": "2026-05-20T13:24:13.000000Z"}, {"uuid": "8c9c2e01-d661-413e-a0c2-57beeb68e238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47372", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmcy3cd42v2n", "content": "CVE-2026-47372 - Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts\nCVE ID : CVE-2026-47372\n \n Published : May 20, 2026, 10:08 p.m. | 7\u00a0minutes ago\n \n Description : Crypt::SaltedHash versions through 0.09 for Perl generate insecure rando...", "creation_timestamp": "2026-05-20T22:42:26.926521Z"}, {"uuid": "f50cc1ad-d696-44db-9d94-9727fae54628", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47782", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmdfgatcka2q", "content": "CVE-2026-47782 - Siber Systems, Inc. RoboForm Android Intent URL Injection Vulnerability\nCVE ID : CVE-2026-47782\n \n Published : May 20, 2026, 11:16 p.m. | 3\u00a0hours ago\n \n Description : Android App \"RoboForm Password Manager\" provided by Siber Systems, Inc. handles Android inten...", "creation_timestamp": "2026-05-21T02:41:13.130787Z"}, {"uuid": "066a02ae-041c-4db2-b6fc-3e60eaf5a69a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47784", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116610969465593715", "content": "Some increased actor activities are shown targeting memcached (CVE-2026-47784) https://vuldb.com/vuln/364829/cti", "creation_timestamp": "2026-05-21T05:43:05.778600Z"}, {"uuid": "d9f78ccd-9518-42e2-92e6-30967aa91bcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47243", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmf4lcuoc42m", "content": "CVE-2026-47243: Kata Containers runtime-rs 3.30: virtiofsd symlink escape", "creation_timestamp": "2026-05-21T19:08:18.829414Z"}, {"uuid": "232d0f86-46d0-4cb7-bb99-b4017a1575df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47243", "type": "seen", "source": "https://bsky.app/profile/news.karthihegde.dev/post/3mmfc2stmd42a", "content": "CVE-2026-47243: Kata Containers guest-root to host-root escape via virtiofs\nDiscussion | lobsters | Author: 7tehdt3cnw6kir6o", "creation_timestamp": "2026-05-21T20:46:27.625197Z"}, {"uuid": "ef1277f8-d4b6-48fb-839d-97d92cc4d7c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47114", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmfculcztd2l", "content": "\ud83d\udfe0 CVE-2026-47114 - High (8.8)\n\nIINA before 1.4.3 contains a user-assisted command execution vulnerability that allows remote att...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47114/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-21T21:00:53.165082Z"}, {"uuid": "f953521c-8de8-4da4-9705-899d2bc9fa16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47784", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmfevepmwb2r", "content": "\ud83d\udccc CVE-2026-47784 - In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_us... https://www.cyberhub.blog/cves/CVE-2026-47784", "creation_timestamp": "2026-05-21T21:38:36.013566Z"}, {"uuid": "2023fb65-ee4f-4ba8-b254-a1f9dc928969", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47101", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmfgadref72q", "content": "\ud83d\udfe0 CVE-2026-47101 - High (8.8)\n\nLiteLLM prior to 1.83.14 allows an authenticated internal_user to create API keys with access to ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47101/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-21T22:01:09.350488Z"}, {"uuid": "a1cea87d-cbe5-4775-ae46-d28610778170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47101", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mmfh44f5ca27", "content": "LiteLLM 1.83.14\u672a\u6e80\u3067\u3001\u8a8d\u8a3c\u6e08\u307finternal_user\u304c\u6a29\u9650\u5916\u306eAPI\u30ad\u30fc\u3092\u4f5c\u6210\u53ef\u80fd\u3002\u3053\u308c\u306b\u3088\u308aproxy_admin\u3078\u306e\u6607\u683c\u304c\u53ef\u80fd\u306b\u306a\u308b\u3002\nCVE-2026-47101 CVSS 8.8 | HIGH", "creation_timestamp": "2026-05-21T22:16:39.876489Z"}, {"uuid": "90971a2c-f8d6-47c5-9bbf-668266d28aee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47783", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmfllxhfro2s", "content": "\ud83d\udccc CVE-2026-47783 - In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid ... https://www.cyberhub.blog/cves/CVE-2026-47783", "creation_timestamp": "2026-05-21T23:37:07.073313Z"}, {"uuid": "72c64aaa-0d64-4e00-82dd-19e5d12bae51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47873", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrz5b3agrs25", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-47873 \u0432 Spring Tools: \u043a\u0430\u043a Docker-\u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044f Boot Dashboard \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432\n\n\n\nhttps://kripta.biz/posts/98A30FD2-E9D4-4AF2-928C-52A5C743F059", "creation_timestamp": "2026-08-01T09:19:41.888427Z"}, {"uuid": "1acccf5a-22f8-47ad-90b8-8f0cad27578f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47372", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmgogo73mx2q", "content": "\ud83d\udd34 CVE-2026-47372 - Critical (9.1)\n\nCrypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts.\n\nThes...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47372/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-22T10:00:30.692510Z"}, {"uuid": "7af9433a-7755-4cc0-a5c0-e63e83098138", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47373", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmhwoid5co26", "content": "\ud83d\udfe0 CVE-2026-47373 - High (7.5)\n\nCrypt::SaltedHash versions through 0.09 for Perl is susceptible to timing attacks.\n\nThese version...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47373/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-22T22:00:43.246685Z"}, {"uuid": "b82e52ba-695b-4fd0-94a1-166d679e5e9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47280", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116623895926855718", "content": "\ud83d\udea9 CVE-2026-47280: CRITICAL improper authentication flaw in Microsoft Azure Resource Manager (CVSS 10). Enables remote privilege escalation. Microsoft has issued a fix \u2014 confirm your ARM is protected. Details: https://radar.offseq.com/threat/cve-2026-47280-cwe-287-improper-authentication-in--e698f484 #OffSeq #Azure #Security #CVE", "creation_timestamp": "2026-05-23T12:32:38.594501Z"}, {"uuid": "5252ffec-5ad1-4c9b-b18b-ed2f52183e6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47668", "type": "seen", "source": "https://t.me/realcodeb0ss/433", "content": "https://www.cve.org/CVERecord?id=CVE-2026-47668\n\n\nFofa : title=\"DbGate\"\n\nShodan : http.title:\"DbGate\"\n\nEnjoy;", "creation_timestamp": "2026-05-24T22:22:53.000000Z"}, {"uuid": "d7db1719-7fec-460d-9b8a-f76a2c057c5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47101", "type": "seen", "source": "https://t.me/GithubRedTeam/85803", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-47101-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a learner202649\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-25 09:12:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThe code for personally reproducing the corresponding vulnerability\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-25T10:00:04.000000Z"}, {"uuid": "be047b16-0989-478a-820a-b0b30d979b4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47101", "type": "seen", "source": "Telegram/-Rw1GdqgLbdPMkOwlVEIvz70NMtSIs0WWvrIrO5vIfavaPE", "content": "", "creation_timestamp": "2026-05-25T11:00:08.000000Z"}, {"uuid": "5216f2ac-248c-41a4-937c-847d2b0f2579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47102", "type": "seen", "source": "https://t.me/GithubRedTeam/85833", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-47102-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a learner202649\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-25 13:38:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThe code for personally reproducing the corresponding vulnerability\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-25T14:00:04.000000Z"}, {"uuid": "0888a60b-d6aa-4a19-ab68-c77a081e75fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47101", "type": "seen", "source": "Telegram/p4pSz48sW8Fl1dqUeH21RBDMwtfRPHmaTBryFak7xdWuTDY", "content": "", "creation_timestamp": "2026-05-25T15:00:06.000000Z"}, {"uuid": "e7eba589-1a39-4bdf-8dc4-13bed8ae75af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47102", "type": "seen", "source": "Telegram/X1Szwu_qpRNev2GcuASsATzQD-1aeqEPKRVacdyAUElWlBI", "content": "", "creation_timestamp": "2026-05-25T15:00:12.000000Z"}, {"uuid": "c962385c-d87a-49ef-a146-90e785421c03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47102", "type": "seen", "source": "Telegram/DE_8V0W55Lks0xFUNDp9UGyNB0T-CRSwfpeIrdYc5V2Tnj4", "content": "", "creation_timestamp": "2026-05-25T21:00:04.000000Z"}, {"uuid": "9cec6a5c-bb48-4779-a9d7-766d44e82be2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4795", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmqnxc33uk2p", "content": "CVE-2026-4795 - Zyxel GS1200 Series Missing Authorization Vulnerability (Configuration Disclosure)\nCVE ID : CVE-2026-4795\n \n Published : May 26, 2026, 1:42 a.m. | 4\u00a0hours, 49\u00a0minutes ago\n \n Description : A missing authorization vulnerability in Zyxel GS1200-5v3 firmware versio...", "creation_timestamp": "2026-05-26T09:18:31.475593Z"}, {"uuid": "b7af9325-3c3f-4b31-b07e-fd945cf09013", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47668", "type": "seen", "source": "https://t.me/GithubRedTeam/85989", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-47668\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Nxploited\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-26 14:47:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nDbGate Unauthenticated Remote Code Execution\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-26T15:00:05.000000Z"}, {"uuid": "41299ee6-3141-4104-88b7-7ba026678a1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47202", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmrrozbwsk2h", "content": "CVE-2026-47202 - Kavita: Pre-Auth Account Takeover\nCVE ID : CVE-2026-47202\n \n Published : 26 mai 2026 17:30 | 31\u00a0minutes ago\n \n Description : Kavita is a cross platform reading server. Prior to 0.9.0.2, an Improper Token validation flaw permits a remote and unauthenticated thr...", "creation_timestamp": "2026-05-26T19:58:08.422901Z"}, {"uuid": "82120521-6891-4eb0-b929-68be32918603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47323", "type": "seen", "source": "https://bsky.app/profile/cyberowi.pl/post/3mmsxqwetty2s", "content": "\ud83d\udea8 Apache Camel: Krytyczna luka CVE-2026-47323 pozwala na RCE\n\nLuka w Apache Camel z ocen\u0105 9.8 CVSS pozwala na zdalne wykonanie kodu. Problem dotyczy popularnych komponent\u00f3w CXF i Knative.\n\nhttps://cyberowi.pl/apache-camel-krytyczna-luka-cve-2026-47323-pozwala-na-rce/\n\n#cyberbezpieczenstwo", "creation_timestamp": "2026-05-27T07:19:43.895111Z"}, {"uuid": "cb2fa2df-cd0b-4bdc-9ff9-2bd3936f920c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47124", "type": "published-proof-of-concept", "source": "https://github.com/nezhahq/nezha/security/advisories/GHSA-hvv7-hfrh-7gxj", "content": "", "creation_timestamp": "2026-05-17T03:49:16.000000Z"}, {"uuid": "196a2204-0b3d-4e7e-93a9-886bc09a19b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47120", "type": "published-proof-of-concept", "source": "https://github.com/nezhahq/nezha/security/advisories/GHSA-rxf6-wjh4-jfj6", "content": "", "creation_timestamp": "2026-05-17T02:58:22.000000Z"}, {"uuid": "0c0d5703-154e-4ee1-8498-4ca2e9aaf2e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47280", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmu2bqqi4p2f", "content": "\ud83d\udccc CVE-2026-47280 - Improper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a network. https://www.cyberhub.blog/cves/CVE-2026-47280", "creation_timestamp": "2026-05-27T17:37:06.770096Z"}, {"uuid": "2f358811-099f-4e23-9bc3-c60bb587a9cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47269", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmumta6v4o2v", "content": "CVE-2026-47269 - pam_usb: deny_remote feature incorrectly classifies IPv4-mapped IPv6 remote connections as local\nCVE ID : CVE-2026-47269\n \n Published : May 27, 2026, 9:16 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : pam_usb provides hardware authentication for Linux using o...", "creation_timestamp": "2026-05-27T23:09:00.423640Z"}, {"uuid": "3456b185-c74a-4c56-a070-c38960416b18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47270", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmumymhwfo2p", "content": "CVE-2026-47270 - pam_usb: strtok() race condition in multi-threaded PAM hosts can corrupt deny_remote result\nCVE ID : CVE-2026-47270\n \n Published : May 27, 2026, 9:16 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : pam_usb provides hardware authentication for Linux using ordina...", "creation_timestamp": "2026-05-27T23:12:07.752125Z"}, {"uuid": "6d7a7b53-0611-492e-a623-48ee01eb5a88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47717", "type": "published-proof-of-concept", "source": "https://github.com/frangoteam/FUXA/security/advisories/GHSA-q3w6-q3hc-c5x6", "content": "", "creation_timestamp": "2026-05-26T16:06:13.000000Z"}, {"uuid": "df032152-aa17-45ec-8d1f-3ffba3ac87de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47243", "type": "published-proof-of-concept", "source": "https://github.com/kata-containers/kata-containers/security/advisories/GHSA-2gv2-cffp-j227", "content": "", "creation_timestamp": "2026-05-21T18:26:35.000000Z"}, {"uuid": "4596dff5-ad4b-421a-ae07-14fa9fd81dda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47705", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mszeavouza2t", "content": "CVE-2026-47705\nTypeBot's result export feature allows attackers to inject malicious data. This can harm administrators who open the exported data in spreadsheet software. Update to the latest version to fix this issue.\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-14T04:50:04.413236Z"}, {"uuid": "4c7fa3e1-8d49-4d63-848f-f12cd1141919", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4789", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-rggm-jjmc-3394", "content": "", "creation_timestamp": "2026-04-14T22:37:20.000000Z"}, {"uuid": "a24939e9-a09b-4292-b09e-2c9a7cc83ad2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47285", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0285", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Developer Tools.  Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide broncodebestand te importeren en verwerken.\n\n```\nVisual Studio Code CoPilot Chat Extension: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65675 | 7.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft PowerShell Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58612 | 7.40 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70337 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70335 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58650 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-59113 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47285 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-69320 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-69278 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-69306 | 8.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-70336 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62897 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62872 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65810 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------| \n| CVE-2026-59119 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70338 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62899 | 5.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-62900 | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62901 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62902 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62909 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58641 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62871 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62886 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70354 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code - Python extension: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54981 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-12T01:02:13.238011Z"}, {"uuid": "ec58844b-5eab-4dd6-b130-15380a2ee56e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47361", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6ljmigjkgmyjs", "content": "CVE-2026-47361 - Datadog Android Application Notification Denial of Service Vulnerability\nCVE ID : CVE-2026-47361\n \n Published : Aug. 7, 2026, 6:02 p.m. | 20\u00a0minutes ago\n \n Description : BubbleChatActivity in the Datadog Android application is declared android:exported=\"true\" ...", "creation_timestamp": "2026-08-07T18:30:10.084812Z"}, {"uuid": "90437d2e-e246-4d48-bde9-21df676fb582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47364", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5iethse5aiie7", "content": "CVE-2026-47364 - Datadog Android Information Disclosure via Firebase Crashlytics\nCVE ID : CVE-2026-47364\n \n Published : Aug. 7, 2026, 6:02 p.m. | 20\u00a0minutes ago\n \n Description : On every successful login, the Datadog Android application calls FirebaseCrashlytics.setUserId with...", "creation_timestamp": "2026-08-07T18:48:06.484688Z"}, {"uuid": "88375bcf-1dd7-43d1-a6e3-853236d8df4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47363", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dhdonwauwwnmr", "content": "CVE-2026-47363 - Datadog Android Application Improper Intent Handling and Session Injection Vulnerability\nCVE ID : CVE-2026-47363\n \n Published : Aug. 7, 2026, 6:02 p.m. | 20\u00a0minutes ago\n \n Description : The launcher activity AppActivity in the Datadog Android application is de...", "creation_timestamp": "2026-08-07T18:50:06.868202Z"}, {"uuid": "a3f4c04f-3fc5-481d-b2dd-2f5b4a948ab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47187", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtikxlumky2j", "content": "CVE-2026-47187 - sshfs-fuse\nA security issue in the Debian Linux package manager allows attackers to execute malicious code on a server without being authenticated. This could lead to unauthorized\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sshfsfuse #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-08-20T06:00:03.973894Z"}, {"uuid": "982d1d63-341e-415c-986b-d90aed86284a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://bsky.app/profile/r1cksec.bsky.social/post/3mtinxaznxk2v", "content": "PoC exploit chain (CVE-2026-47301) for SCCM, combining a broken access, CAB arbitrary-write path traversal, certificate verification bypass, and DLL hijacking to achieve SYSTEM-level code execution.\n\ngithub.com/OmriBaso/SCC...\n\n#infosec #cybersecurity #pentest #cve #redteam", "creation_timestamp": "2026-08-20T06:53:35.879695Z"}, {"uuid": "359acb14-378e-4c3a-b7a4-dd3544e9adc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47243", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7piuosplgprvk", "content": "CVE-2026-47243 - Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs\nCVE ID : CVE-2026-47243\n \n Published : Aug. 7, 2026, 9:36 p.m. | 47\u00a0minutes ago\n \n Description : Kata Containers is an open source project focusing on a standard implementation of lightw...", "creation_timestamp": "2026-08-07T22:52:11.038183Z"}, {"uuid": "6ec122f2-36ff-4219-a6fb-ce967c2e09d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47243", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msjos6brjn2u", "content": "CVE-2026-47243 - kata-containers\nAn attacker with root access inside a Kata Containers guest can create symbolic links on the host that allow them to execute code as the host root user. This is a risk\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#katacontainers #Golang #CVE #infosec", "creation_timestamp": "2026-08-07T23:16:05.068101Z"}, {"uuid": "bb2b2450-33cf-43dd-954f-4c74928f8e2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47249", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msjrdw2woo2y", "content": "\ud83d\udfe0 CVE-2026-47249 - High (7.5)\n\nKlever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.18, the P2P re...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47249/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-08T00:03:54.316732Z"}, {"uuid": "9b26701d-f2e7-4abf-86c2-313f1010cdcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47291", "type": "seen", "source": "https://bsky.app/profile/captechgroup.com/post/3muaibyfugz2i", "content": "206 vulnerabilities in Microsoft's June 2026 update, 32 critical, 28 of those remote code execution. CVE-2026-47291 in http.sys needs no credentials and no user interaction. Talos published Snort coverage. #infosec #cybersecurity", "creation_timestamp": "2026-08-29T18:16:05.942811Z"}, {"uuid": "a0bbc157-44d2-4791-b8d8-4d85b0de88c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47668", "type": "seen", "source": "Telegram/PMwLWJ8bCumUt1_njp0TjasQmSGobRcnITTCtVX5oyv1QKE", "content": "", "creation_timestamp": "2026-05-27T21:00:05.000000Z"}, {"uuid": "348841e5-89e1-42bd-af91-61dddfb34a73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47668", "type": "seen", "source": "Telegram/x-gpTIreB2tb5Q-Jw8cVX3Xwo2MhNZ2uzY1qavh-XKqhSxE", "content": "", "creation_timestamp": "2026-05-27T21:06:35.000000Z"}, {"uuid": "2b866789-a221-45ab-ba29-f11f9c202cfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47074", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmvyyac4xx2q", "content": "CVE-2026-47074 - ex_aws_sns SigningCertURL not validated in verify_message/1\nCVE ID : CVE-2026-47074\n \n Published : May 28, 2026, 10:16 a.m. | 53\u00a0minutes ago\n \n Description : Improper Certificate Validation vulnerability in ex-aws ex_aws_sns (ExAws.SNS, ExAws.SNS.PublicKeyCach...", "creation_timestamp": "2026-05-28T12:19:12.869947Z"}, {"uuid": "a8bf9c16-0d7e-4384-8bb7-df5d6e54553c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47759", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwiq4djr42l", "content": "\ud83d\udfe0 CVE-2026-47759 - High (8.7)\n\nTinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47759/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T17:01:01.189311Z"}, {"uuid": "32e8e600-4ec3-4286-a77a-69229078ba98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47760", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwiqdulb42e", "content": "\ud83d\udfe0 CVE-2026-47760 - High (8.7)\n\nTinyMCE is an open source rich text editor. From 6.8.0 to before 7.1.0, TinyMCE contains an XSS v...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47760/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T17:01:08.753336Z"}, {"uuid": "61f3cdaa-5bf5-4883-b1c6-fb51c9b01236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47761", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwiqloac22z", "content": "\ud83d\udfe0 CVE-2026-47761 - High (8.7)\n\nTinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47761/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T17:01:17.307721Z"}, {"uuid": "2d777e9c-605a-4e70-aebc-c14d040c72e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47762", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwitepmxs2r", "content": "\ud83d\udfe0 CVE-2026-47762 - High (8.7)\n\nTinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47762/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T17:02:50.334802Z"}, {"uuid": "f6c7fb0d-af3a-46e0-a0c8-6838b3ba55d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47762", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mmwitfsqyw2t", "content": "\ud83d\udfe0 CVE-2026-47762 - High (8.7)\n\nTinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored ...\n\nhttps://www.themasherwire.com/vulnerability/CVE-2026-47762/\n\n#infosec #potatosecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T17:02:51.003855Z"}, {"uuid": "b7a0606a-8bde-4ccc-9a04-8179f2fb2ac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47760", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwiv4daft2e", "content": "CVE-2026-47760 - TinyMCE Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGs\nCVE ID : CVE-2026-47760\n \n Published : May 28, 2026, 4:16 p.m. | 15\u00a0minutes ago\n \n Description : TinyMCE is an open source rich text editor. From 6.8.0 to before 7.1...", "creation_timestamp": "2026-05-28T17:03:47.732971Z"}, {"uuid": "143641e3-9c34-4a6b-9548-b9dd1d580af2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47761", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwixsmqhn2i", "content": "CVE-2026-47761 - TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` injection\nCVE ID : CVE-2026-47761\n \n Published : May 28, 2026, 4:16 p.m. | 15\u00a0minutes ago\n \n Description : TinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3,...", "creation_timestamp": "2026-05-28T17:05:18.516362Z"}, {"uuid": "05f7c162-9cb8-4db4-aa03-35c60ea3d616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47762", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwjlngtmy2p", "content": "CVE-2026-47762 - TinyMCE Cross-Site Scripting (XSS) vulnerability through `mce:protected` comments\nCVE ID : CVE-2026-47762\n \n Published : May 28, 2026, 4:16 p.m. | 15\u00a0minutes ago\n \n Description : TinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, th...", "creation_timestamp": "2026-05-28T17:16:24.119102Z"}, {"uuid": "04c94230-85b0-4a64-b270-5865aa84ba3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47759", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwjz5vnzt2i", "content": "CVE-2026-47759 - TinyMCE Cross-Site Scripting (XSS) vulnerability using through data-mce- prefixed src, href, style attributes\nCVE ID : CVE-2026-47759\n \n Published : May 28, 2026, 4:16 p.m. | 15\u00a0minutes ago\n \n Description : TinyMCE is an open source rich text editor. Prior to ...", "creation_timestamp": "2026-05-28T17:23:57.537231Z"}, {"uuid": "78fed709-407c-452c-88be-b394dd7d528d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47333", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwsruwd5o2w", "content": "\ud83d\udfe0 CVE-2026-47333 - High (7.8)\n\nUbuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which can potentially incorrectly c...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47333/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T20:00:57.660476Z"}, {"uuid": "393f8ecc-177c-4933-9f22-e8047fa6e134", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47331", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwssdpyjt26", "content": "\ud83d\udfe0 CVE-2026-47331 - High (7.8)\n\nUbuntu Linux 6.8 contains AppArmor SAUCE patches which fail to acquire a lock when modifying a li...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47331/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T20:01:13.306811Z"}, {"uuid": "d39fd00d-13a6-42de-80f6-e58485b11b35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47337", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwwuie44e2k", "content": "CVE-2026-47337 - NULL pointer dereference in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation\nCVE ID : CVE-2026-47337\n \n Published : May 28, 2026, 7:16 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL poin...", "creation_timestamp": "2026-05-28T21:14:57.401474Z"}, {"uuid": "1c67f99d-1bc9-4fa1-8ebc-4baea4fa2a1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47336", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwwzzrkyp2r", "content": "CVE-2026-47336 - Use of uninitialized value in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation rules\nCVE ID : CVE-2026-47336\n \n Published : May 28, 2026, 7:16 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : Ubuntu Linux 6.8 contains SAUCE patches with a possible use of an unin...", "creation_timestamp": "2026-05-28T21:17:06.629688Z"}, {"uuid": "169f343a-8827-4788-a5b3-c786b476f734", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47335", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwx526bv32p", "content": "CVE-2026-47335 - NULL pointer dereference in Ubuntu Linux AppArmor notification handling\nCVE ID : CVE-2026-47335\n \n Published : May 28, 2026, 7:16 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : Ubuntu Linux 6.8 contains SAUCE patches with a possible NULL pointer dereference in...", "creation_timestamp": "2026-05-28T21:18:46.413988Z"}, {"uuid": "ad37ae2f-7cb3-4aef-b574-2d92059b8574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47332", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwxaa77nw2o", "content": "CVE-2026-47332 - Out-of-bounds read in Ubuntu Linux AppArmor notification handling\nCVE ID : CVE-2026-47332\n \n Published : May 28, 2026, 7:16 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly validate ...", "creation_timestamp": "2026-05-28T21:20:33.504728Z"}, {"uuid": "442f6efd-65ed-4593-89df-48adf7d34722", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47333", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwxp6nfb52r", "content": "CVE-2026-47333 - Out-of-bounds read in Ubuntu Linux AppArmor notification handling\nCVE ID : CVE-2026-47333\n \n Published : May 28, 2026, 7:16 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which can potentially incor...", "creation_timestamp": "2026-05-28T21:28:55.101620Z"}, {"uuid": "1846515d-ea27-4dca-9140-9cc6f0679af9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47759", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmwy5syw2c2r", "content": "\ud83d\udccc CVE-2026-47759 - TinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored XSS vulnerability via unsanitized data-mce-* attribut... https://www.cyberhub.blog/cves/CVE-2026-47759", "creation_timestamp": "2026-05-28T21:37:06.575657Z"}, {"uuid": "1165319c-43ee-4cf4-bfdf-f6a9a799cd07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47334", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwy5wxgmz2p", "content": "CVE-2026-47334 - Deadlock or kernel panic in Ubuntu Linux AppArmor notification handling\nCVE ID : CVE-2026-47334\n \n Published : May 28, 2026, 7:16 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly sle...", "creation_timestamp": "2026-05-28T21:37:10.305417Z"}, {"uuid": "7aa3e8e5-d483-464b-a9f2-8424703167e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47243", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3msjtwoxz4s2b", "content": "Guest Privilege Becomes Host Ruin, Thanks for the Elegant Disaster\nPANIC 84% | Lag 0.0h | CVE-2026-47243 lets an attacker with root inside a Kata Containers guest create host symlinks and ex\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-08T00:49:16.766199Z"}, {"uuid": "630bf714-50a0-4a5f-9963-8783ecd53e26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47760", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmwztignsj2w", "content": "\ud83d\udccc CVE-2026-47760 - TinyMCE is an open source rich text editor. From 6.8.0 to before 7.1.0, TinyMCE contains an XSS vulnerability caused by improper SVG namespace scope h... https://www.cyberhub.blog/cves/CVE-2026-47760", "creation_timestamp": "2026-05-28T22:07:07.395256Z"}, {"uuid": "3659bb67-4491-4ab6-8fea-b8f473598712", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47299", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0287", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Azure componenten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals benoemd in onderstaande tabel.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-56162**, met een CVSS score van 10.0 en de kwetsbaarheden met kenmerk **CVE-2026-50516, CVE-2026-56161, CVE-2026-59115, CVE-2026-62830, CVE-2026-62873** en **CVE-2026-68823**, elk met een CVSS score hoger dan 9, zijn reeds centraal verholpen door Microsoft zelf en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-50481**, met een CVSS score van 9.9 echter, vereist **wel** actie. Deze kwetsbaarheid bevindt zich in de Azure Active Directory en stelt een kwaadwillende in staat om zich verhoogde rechten toe te kennen en daarmee toegang te krijgen tot gegevens en componenten waartoe de kwaadwillende aanvankelijk niet is geautoriseerd.\n\n```\nAzure Monitor Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47299 | 7.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Purview eDiscovery: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65668 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Kubernetes Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50516 | 9.40 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Entra ID: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62869 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Entra Connect Sync: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65673 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Database: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63522 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56162 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Logic Apps: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56161 | 9.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nAzure Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50481 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nApplication Insights Profiler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49163 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SRE Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62830 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Entra Provisioning Service (SyncFabric): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59115 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure CycleCloud: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70340 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65806 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nAzure Confidential Ledger: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68823 | 9.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft 365 Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62873 | 9.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Storage Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57104 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-12T07:02:11.684097Z"}, {"uuid": "7511dd6f-be5d-4eb1-a4c6-7c851c88ae0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47718", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-r9g5-7q8j-958c", "content": "", "creation_timestamp": "2026-05-28T20:33:11.000000Z"}, {"uuid": "6dcc5deb-b56f-474d-b77f-b0ab4b91c2a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47762", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmx56ryjwm2g", "content": "\ud83d\udccc CVE-2026-47762 - TinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored XSS vulnerability via forged mce:protected comments. ... https://www.cyberhub.blog/cves/CVE-2026-47762", "creation_timestamp": "2026-05-28T23:07:07.601267Z"}, {"uuid": "8e093daa-9207-40ef-8d7e-ad94684f7a36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47761", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmxc7q5jp42w", "content": "\ud83d\udccc CVE-2026-47761 - TinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored XSS vulnerability in the media plugin. Attackers can ... https://www.cyberhub.blog/cves/CVE-2026-47761", "creation_timestamp": "2026-05-29T00:37:08.187707Z"}, {"uuid": "12bb1dc8-16d1-4d73-800f-0d4086027081", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://t.me/bdufstecru/3394", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0418\u0422-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439 Microsoft Configuration Manager \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0440\u0430\u0437\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438\n\nBDU:2026-11890\nCVE-2026-47301\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47301", "creation_timestamp": "2026-08-19T16:00:03.748421Z"}, {"uuid": "c58eb244-64e0-4c9c-8852-640e8cc5c95f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "published-proof-of-concept", "source": "Telegram/t1QqKCQA32iQQM5dMX6BnGOwIoCN3RgMOFB7xsm5WfPwX6Ds", "content": "", "creation_timestamp": "2026-08-16T22:00:04.585229Z"}, {"uuid": "535c0f6f-9701-4a2b-836c-9b45e4f3e743", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47187", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtnik5vycl2m", "content": "CVE-2026-47187\nIf you use SSHFS versions before 3.7.6, a malicious SFTP server can send specially crafted links that cause your computer to access files on its own disk. This can let the attacker see private files or modify\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T05:00:04.530603Z"}, {"uuid": "bf916072-ac6e-4305-bd37-80c4606dc890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47187", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mth4mofmdt2j", "content": "\ud83d\udea8 CVE-2026-47187 \u2014 CVSS 9.3 CRITICAL\n\nSSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP se...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-47187\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T16:10:45.411609Z"}, {"uuid": "5bedb033-c3f8-43a2-a5b9-8a4cb02c9c6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtae6u2psc2o", "content": "CVE-2026-47301 is trending. Hype score 5, currently #7 on cvemon.\n\nImproper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-47301", "creation_timestamp": "2026-08-16T23:37:33.321810Z"}, {"uuid": "c7342ca1-5c01-48ff-9ca3-dd9d84ca8eb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47694", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmyz7ktvwb27", "content": "CVE-2026-47694 - WWBN AVideo: Stored XSS via unescaped Gallery category description\nCVE ID : CVE-2026-47694\n \n Published : May 29, 2026, 2:16 p.m. | 1\u00a0hour, 55\u00a0minutes ago\n \n Description : WWBN AVideo is an open source video platform. In 29.0 and earlier, AVideo stores categor...", "creation_timestamp": "2026-05-29T17:01:17.839013Z"}, {"uuid": "2764ea58-f7f9-4954-a57a-a9fc6a629c4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47696", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmz35lsz4e23", "content": "CVE-2026-47696 - WWBN AVideo: Authenticated wallet credit bypass in AuthorizeNet processPayment endpoint\nCVE ID : CVE-2026-47696\n \n Published : May 29, 2026, 2:16 p.m. | 1\u00a0hour, 55\u00a0minutes ago\n \n Description : WWBN AVideo is an open source video platform. In 29.0 and earlier, ...", "creation_timestamp": "2026-05-29T17:35:59.518044Z"}, {"uuid": "29e79693-d987-42e5-a139-c430a6203836", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47407", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-h8q5-cp56-rr65", "content": "", "creation_timestamp": "2026-05-19T06:35:50.000000Z"}, {"uuid": "7dd7a7f7-b93c-40ad-8617-a6fd64b4c5a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47391", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-vg22-4gmj-prxw", "content": "", "creation_timestamp": "2026-05-19T06:35:04.000000Z"}, {"uuid": "772a1a7e-b0d4-4828-8a11-f535b5db528d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47125", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmz7v62jq52a", "content": "\ud83d\udfe0 CVE-2026-47125 - High (8.8)\n\nArcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47125/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-29T19:00:46.011870Z"}, {"uuid": "c70757d9-70eb-4145-bda3-6b263d4ee5da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47179", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmz7wmqkjr2m", "content": "\ud83d\udfe0 CVE-2026-47179 - High (7.7)\n\nArcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47179/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-29T19:01:35.873960Z"}, {"uuid": "2f22000a-f1a9-45d0-bf29-bd4b542a6baf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47744", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmzdburqpr2d", "content": "\ud83d\udd34 CVE-2026-47744 - Critical (9.9)\n\nShopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, two distinct authorization defects ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47744/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-29T20:01:33.794688Z"}, {"uuid": "6c10808e-9289-410a-98d5-4fa6f0638c00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47125", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmze567paf2r", "content": "CVE-2026-47125 - Arcane: Missing admin authorization on global variables endpoint\nCVE ID : CVE-2026-47125\n \n Published : May 29, 2026, 6:17 p.m. | 54\u00a0minutes ago\n \n Description : Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.1...", "creation_timestamp": "2026-05-29T20:16:48.977509Z"}, {"uuid": "a0ade78a-87c5-4811-892f-71d48b600c3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47123", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmzglc7zsk2r", "content": "\ud83d\udfe0 CVE-2026-47123 - High (7.5)\n\nFreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.2...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47123/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-29T21:00:31.612144Z"}, {"uuid": "0ecccf03-4598-4df9-9417-84a2a247bfa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47123", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmzin7xb4n2h", "content": "CVE-2026-47123 - FreeScout: Agent Impersonation via Missing HMAC Verification on Notification Reply Message-ID Path\nCVE ID : CVE-2026-47123\n \n Published : May 29, 2026, 8:16 p.m. | 16\u00a0minutes ago\n \n Description : FreeScout is a free help desk and shared inbox built with PHP's ...", "creation_timestamp": "2026-05-29T21:37:22.424074Z"}, {"uuid": "3936d395-3bb6-456e-b115-4497b668cccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47397", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-hvhp-v2gc-268q", "content": "", "creation_timestamp": "2026-05-19T06:35:00.000000Z"}, {"uuid": "59e45271-1eb7-4fb4-b51b-a7784b84784d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47266", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmzkfldrxk25", "content": "CVE-2026-47266 - Formie: Unauthenticated front-end submission editing can overwrite existing submissions\nCVE ID : CVE-2026-47266\n \n Published : May 29, 2026, 8:16 p.m. | 16\u00a0minutes ago\n \n Description : Formie is a Craft CMS plugin for creating forms. Prior to 2.2.21 and 3.1.26...", "creation_timestamp": "2026-05-29T22:08:53.503429Z"}, {"uuid": "005eaf4d-4d98-4dd8-b7b5-007c94c40e25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47740", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmznch3ugc2m", "content": "\ud83d\udfe0 CVE-2026-47740 - High (8.1)\n\nShopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, Multiple Filament actions on the ad...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47740/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-29T23:00:50.534178Z"}, {"uuid": "c80a465a-82be-40f8-8c0e-ebf78d634124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47405", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-h37g-4h4p-9x97", "content": "", "creation_timestamp": "2026-05-19T06:35:48.000000Z"}, {"uuid": "e22c9f06-d96c-4aab-bbcb-6a1cf013ae77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47399", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-6h6v-6m7w-7vxx", "content": "", "creation_timestamp": "2026-05-19T06:35:47.000000Z"}, {"uuid": "cf40e4a9-1dad-4361-8b11-7f4d0d7b57c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47394", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-9cr9-25q5-8prj", "content": "", "creation_timestamp": "2026-05-19T06:34:57.000000Z"}, {"uuid": "2cadefa0-5ce4-4b88-8334-89613e07c050", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47392", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4mr5-g6f9-cfrh", "content": "", "creation_timestamp": "2026-05-19T06:34:53.000000Z"}, {"uuid": "504c1635-fa24-4e1e-b407-db39ccf8abd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47268", "type": "published-proof-of-concept", "source": "https://github.com/nezhahq/nezha/security/advisories/GHSA-6x26-5727-rrm9", "content": "", "creation_timestamp": "2026-05-19T01:15:10.000000Z"}, {"uuid": "2258043e-a95f-414b-b99a-cc8a2a5b8ec2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47627", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117117607235862161", "content": "Nvidia has new advisories addressing two vulnerabilities:\n- NVIDIA Cumulus Linux and NVOS - August 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5817\n- CRITICAL, affecting the following: CVE-2026-47627, CVE-2026-47628, CVE-2026-47629, CVE-2026-47606, CVE-2026-47630\nNVIDIA Triton Inference Server - August 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5865 #Nvidia #infosec #vulnerability", "creation_timestamp": "2026-08-18T17:07:45.106178Z"}, {"uuid": "a0afbbd1-ccb7-4a8f-b2e9-c632b8b4e2db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47628", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117117607235862161", "content": "Nvidia has new advisories addressing two vulnerabilities:\n- NVIDIA Cumulus Linux and NVOS - August 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5817\n- CRITICAL, affecting the following: CVE-2026-47627, CVE-2026-47628, CVE-2026-47629, CVE-2026-47606, CVE-2026-47630\nNVIDIA Triton Inference Server - August 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5865 #Nvidia #infosec #vulnerability", "creation_timestamp": "2026-08-18T17:07:45.163502Z"}, {"uuid": "ee36d36d-8391-4004-bb11-c0b6352e9132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47629", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117117607235862161", "content": "Nvidia has new advisories addressing two vulnerabilities:\n- NVIDIA Cumulus Linux and NVOS - August 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5817\n- CRITICAL, affecting the following: CVE-2026-47627, CVE-2026-47628, CVE-2026-47629, CVE-2026-47606, CVE-2026-47630\nNVIDIA Triton Inference Server - August 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5865 #Nvidia #infosec #vulnerability", "creation_timestamp": "2026-08-18T17:07:45.222801Z"}, {"uuid": "005b9863-864a-4ad2-8d94-b3dd69183ba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47395", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-5cxw-77wg-jrf3", "content": "", "creation_timestamp": "2026-05-19T06:34:56.000000Z"}, {"uuid": "c92f9223-18b4-46e3-8d2f-d01782d17359", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47393", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-8444-4fhq-fxpq", "content": "", "creation_timestamp": "2026-05-29T22:29:20.000000Z"}, {"uuid": "a9d2b902-3e76-4873-9d9c-a58c196a47fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47396", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-86qc-r5v2-v6x6", "content": "", "creation_timestamp": "2026-05-19T06:34:59.000000Z"}, {"uuid": "0e7d137e-30a6-4d01-ab29-096d68ce2f18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47390", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-5c6w-wwfq-7qqm", "content": "", "creation_timestamp": "2026-05-19T06:34:55.000000Z"}, {"uuid": "f75de5a6-bd55-4c60-b0da-7b728def04cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47398", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-78r8-wwqv-r299", "content": "", "creation_timestamp": "2026-05-19T06:35:03.000000Z"}, {"uuid": "10727d11-765d-4e0b-b298-10d984598735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47233", "type": "published-proof-of-concept", "source": "https://github.com/Admidio/admidio/security/advisories/GHSA-xw54-c3mx-9pm3", "content": "", "creation_timestamp": "2026-05-25T08:45:34.000000Z"}, {"uuid": "35f1c9d2-f0cc-4682-9926-0341520be7aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47234", "type": "published-proof-of-concept", "source": "https://github.com/Admidio/admidio/security/advisories/GHSA-mch8-wf3h-6x88", "content": "", "creation_timestamp": "2026-05-25T08:44:49.000000Z"}, {"uuid": "e7993384-b969-4460-ab92-595d6b0a259d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47232", "type": "published-proof-of-concept", "source": "https://github.com/Admidio/admidio/security/advisories/GHSA-4rgq-38mh-9xqg", "content": "", "creation_timestamp": "2026-05-25T08:45:09.000000Z"}, {"uuid": "26d1e021-c214-4307-9277-e39dc8e99d2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47231", "type": "published-proof-of-concept", "source": "https://github.com/Admidio/admidio/security/advisories/GHSA-x628-457g-2pw9", "content": "", "creation_timestamp": "2026-05-25T08:46:04.000000Z"}, {"uuid": "9b5209d5-5500-4ac5-96ab-77d739f403c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47230", "type": "published-proof-of-concept", "source": "https://github.com/Admidio/admidio/security/advisories/GHSA-q6w3-hpfv-rg36", "content": "", "creation_timestamp": "2026-05-25T08:45:49.000000Z"}, {"uuid": "39bb08fb-2849-47d3-945d-da60d3e4469e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47229", "type": "published-proof-of-concept", "source": "https://github.com/Admidio/admidio/security/advisories/GHSA-xg76-5qj2-2hhv", "content": "", "creation_timestamp": "2026-05-25T08:46:17.000000Z"}, {"uuid": "1a52e8e9-ea76-4be2-b53a-04de399a75d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47228", "type": "published-proof-of-concept", "source": "https://github.com/Admidio/admidio/security/advisories/GHSA-mx25-j3rc-6w2w", "content": "", "creation_timestamp": "2026-05-25T08:46:30.000000Z"}, {"uuid": "c7ed244c-424d-4d28-bd30-46315821baae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47227", "type": "published-proof-of-concept", "source": "https://github.com/Admidio/admidio/security/advisories/GHSA-rwjr-qjj3-mq2f", "content": "", "creation_timestamp": "2026-05-25T08:46:45.000000Z"}, {"uuid": "ac0e34da-9637-45b2-8d3c-68e152b630b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47226", "type": "published-proof-of-concept", "source": "https://github.com/Admidio/admidio/security/advisories/GHSA-qc4c-hrmc-4f78", "content": "", "creation_timestamp": "2026-05-25T08:44:09.000000Z"}, {"uuid": "d100a1a0-4a57-471a-9956-eab5a280ee40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47213", "type": "published-proof-of-concept", "source": "https://github.com/boxlite-ai/boxlite/security/advisories/GHSA-xjhv-pp2r-6f82", "content": "", "creation_timestamp": "2026-05-19T13:11:58.000000Z"}, {"uuid": "f65fbbba-9cb5-4541-8be5-7e00289fe42c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47695", "type": "published-proof-of-concept", "source": "https://github.com/cc-tweaked/CC-Tweaked/security/advisories/GHSA-5jh9-2h63-pw4q", "content": "", "creation_timestamp": "2026-05-18T22:28:24.000000Z"}, {"uuid": "73b04b78-ae07-4e95-ba5a-d85d907724cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47260", "type": "published-proof-of-concept", "source": "https://github.com/koel/koel/security/advisories/GHSA-7j2f-6h2r-6cqc", "content": "", "creation_timestamp": "2026-05-18T21:55:14.000000Z"}, {"uuid": "214655fd-4fed-4939-b62c-452bd770ec64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47121", "type": "published-proof-of-concept", "source": "https://github.com/sparkle-project/Sparkle/security/advisories/GHSA-hg88-v3cw-3qrh", "content": "", "creation_timestamp": "2026-05-19T03:47:16.000000Z"}, {"uuid": "68596efa-8394-462d-b792-16c381c79a88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47141", "type": "published-proof-of-concept", "source": "https://github.com/patriksimek/vm2/security/advisories/GHSA-9g8x-92q2-p28f", "content": "", "creation_timestamp": "2026-05-18T12:49:16.000000Z"}, {"uuid": "7db1fc65-da7c-43fe-bbd0-e6ba7f3cd361", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47139", "type": "published-proof-of-concept", "source": "https://github.com/patriksimek/vm2/security/advisories/GHSA-r9pm-gxmw-wv6p", "content": "", "creation_timestamp": "2026-05-18T12:48:57.000000Z"}, {"uuid": "d9ed0c40-0e8f-47be-ba1b-0b772e9aa8d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47140", "type": "published-proof-of-concept", "source": "https://github.com/patriksimek/vm2/security/advisories/GHSA-rp36-8xq3-r6c4", "content": "", "creation_timestamp": "2026-05-18T12:48:43.000000Z"}, {"uuid": "a3091e50-c006-489a-b7ea-8d0b953a8bf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47210", "type": "published-proof-of-concept", "source": "https://github.com/patriksimek/vm2/security/advisories/GHSA-6j2x-vhqr-qr7q", "content": "", "creation_timestamp": "2026-05-18T12:48:20.000000Z"}, {"uuid": "b1a356b9-4967-4f3d-b0f7-71dd93834964", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47208", "type": "published-proof-of-concept", "source": "https://github.com/patriksimek/vm2/security/advisories/GHSA-76w7-j9cq-rx2j", "content": "", "creation_timestamp": "2026-05-18T12:46:19.000000Z"}, {"uuid": "3e1d725f-66c9-4596-aa14-112bcaf3f2c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47131", "type": "published-proof-of-concept", "source": "https://github.com/patriksimek/vm2/security/advisories/GHSA-v6mx-mf47-r5wg", "content": "", "creation_timestamp": "2026-05-18T12:45:44.000000Z"}, {"uuid": "bc54757a-75f9-48cd-ac97-4f3a8641b454", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47200", "type": "published-proof-of-concept", "source": "https://github.com/nuxt/nuxt/security/advisories/GHSA-hg3f-28rg-4jxj", "content": "", "creation_timestamp": "2026-05-18T11:08:49.000000Z"}, {"uuid": "42d5d813-dbb9-43eb-99ee-ef81d2fd93af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47606", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117117607235862161", "content": "Nvidia has new advisories addressing two vulnerabilities:\n- NVIDIA Cumulus Linux and NVOS - August 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5817\n- CRITICAL, affecting the following: CVE-2026-47627, CVE-2026-47628, CVE-2026-47629, CVE-2026-47606, CVE-2026-47630\nNVIDIA Triton Inference Server - August 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5865 #Nvidia #infosec #vulnerability", "creation_timestamp": "2026-08-18T17:07:45.280568Z"}, {"uuid": "e2e2618f-4c1e-43cd-bee7-38d176e2519c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47630", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117117607235862161", "content": "Nvidia has new advisories addressing two vulnerabilities:\n- NVIDIA Cumulus Linux and NVOS - August 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5817\n- CRITICAL, affecting the following: CVE-2026-47627, CVE-2026-47628, CVE-2026-47629, CVE-2026-47606, CVE-2026-47630\nNVIDIA Triton Inference Server - August 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5865 #Nvidia #infosec #vulnerability", "creation_timestamp": "2026-08-18T17:07:45.341824Z"}, {"uuid": "eb51d9dd-5899-4808-91e5-9130dbff9dba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47092", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mn2vjwwl3g2j", "content": "\u3010\u8106\u5f31\u6027\u60c5\u5831\u3011 CVE-2026-47092 Claude HUD\u00a00.0.12\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\n\nCVE-2026-47092\u306f\u3001Claude HUD\u306e\u30d0\u30fc\u30b8\u30e7\u30f30.0.12\u306b\u5b58\u5728\u3059\u308b\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u3067\u3059\u3002", "creation_timestamp": "2026-05-30T11:00:50.951013Z"}, {"uuid": "bfaaf389-63e5-4dfc-8c6c-335888707482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47187", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mn34f42qcq2r", "content": "CVE-2026-47187, CVE-2026-48711: sshfs", "creation_timestamp": "2026-05-30T13:03:24.621529Z"}, {"uuid": "ec3a706b-0d64-4703-aafe-2d118ef8d8ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47187", "type": "seen", "source": "https://infosec.exchange/users/harrysintonen/statuses/116663533676457323", "content": "CVE-2026-47187: Symlink escape - rogue SFTP server -> local file read/writeSeverity: Critical (CVSS 9.3, CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N)CWE: CWE-59 (Improper Link Resolution Before File Access)\nA rogue SFTP server can return symlink targets (absolute paths or relative \"../../../\" escapes) that sshfs passes to the kernel unchanged. The kernel resolves them on the client's local filesystem, so an ordinary \"cp\" through the mountpoint can read local files back to the server or write server-controlled bytes to local files. transform_symlinks does not cover relative targets.\nhttps://www.openwall.com/lists/oss-security/2026/05/30/3\n#CVE_2026_47187", "creation_timestamp": "2026-05-30T12:30:53.342192Z"}, {"uuid": "bb82e71b-987a-4567-883d-67eed592601e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4793", "type": "seen", "source": "https://jvn.jp/en/jp/JVN91713656", "content": "", "creation_timestamp": "2026-08-17T04:45:18.229745Z"}, {"uuid": "3b57a663-ad25-4605-96a8-277063f285b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47876", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mubu2orz3x2g", "content": "Top 3 CVE for last 7 days:\nCVE-2026-41992: 43 interactions\nCVE-2026-73570: 20 interactions\nCVE-2026-60004: 19 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-53362: 3 interactions\nCVE-2026-47876: 2 interactions\nCVE-2026-55843: 2 interactions\n", "creation_timestamp": "2026-08-30T07:19:26.580895Z"}, {"uuid": "d8c2cb7b-4dd3-4577-a24d-fa33f1a7fa76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47606", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2jo5c23t7guo3", "content": "CVE-2026-47606 - NVIDIA Triton Inference Server Absolute Path Traversal\nCVE ID : CVE-2026-47606\n \n Published : Aug. 18, 2026, 6:23 p.m. | 12\u00a0minutes ago\n \n Description : NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute...", "creation_timestamp": "2026-08-18T18:51:47.508977Z"}, {"uuid": "7e0e524b-68d1-4332-a32d-76043d281921", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47627", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5qawcz7o4rcvl", "content": "CVE-2026-47627 - NVIDIA Triton Inference Server Path Traversal Vulnerability\nCVE ID : CVE-2026-47627\n \n Published : Aug. 18, 2026, 6:23 p.m. | 12\u00a0minutes ago\n \n Description : NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path t...", "creation_timestamp": "2026-08-18T18:57:47.138167Z"}, {"uuid": "f46d31f3-a4d3-4b47-ba33-1ce9d0d7a7c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47323", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mn7wluvr6k27", "content": "\u3010\u7dca\u6025\u3011CVE-2026-47323 Apache Camel: 3.18.0\u304b\u30894.14.6\u30014.15.0\u304b\u30894.18.2\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\uff5c\u5373\u6642\u5bfe\u5fdc\u304c\u5fc5\u8981\n\n\u3053\u306e\u8106\u5f31\u6027\u306f\u3001Apache Camel\u306e\u7279\u5b9a\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u304a\u3044\u3066\u3001\u672a\u8a8d\u8a3c\u306e\u653b\u6483\u8005\u304cHTTP\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u4ecb\u3057\u3066Camel\u5185\u90e8\u30d8\u30c3\u30c0\u30fc\u3092\u6ce8\u5165\u3067\u304d\u308b\u554f\u984c\u3067\u3059\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u3084\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u66f8\u304d\u8fbc\u307f\u304c\u53ef\u80fd\u306b\u306a\u308b\u6050\u308c\u304c\u3042\u308a\u307e\u3059\u3002", "creation_timestamp": "2026-06-01T11:03:09.608089Z"}, {"uuid": "ccb65112-df79-4ed6-bf58-1170de762898", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47428", "type": "published-proof-of-concept", "source": "https://github.com/vitest-dev/vitest/security/advisories/GHSA-2h32-95rg-cppp", "content": "", "creation_timestamp": "2026-05-19T09:23:47.000000Z"}, {"uuid": "e2c1abbd-97b9-4484-ba21-9e557b2923b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47429", "type": "published-proof-of-concept", "source": "https://github.com/vitest-dev/vitest/security/advisories/GHSA-5xrq-8626-4rwp", "content": "", "creation_timestamp": "2026-05-19T09:24:23.000000Z"}, {"uuid": "681db4a6-288f-4d85-a81a-53924c35ed65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47423", "type": "published-proof-of-concept", "source": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-87xg-pxx2-7hvx", "content": "", "creation_timestamp": "2026-05-19T09:26:54.000000Z"}, {"uuid": "9d196e1e-bb39-447c-ab3a-3c956cecbef0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47294", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnatwv5drf2z", "content": "CVE-2026-47294 - Microsoft SharePoint Server Remote Code Execution Vulnerability\nCVE ID : CVE-2026-47294\n \n Published : June 1, 2026, 6:26 p.m. | 46\u00a0minutes ago\n \n Description : None\n \n Severity: 8.0 | HIGH\n \n Visit the link for more details, such as CVSS details, affected pro...", "creation_timestamp": "2026-06-01T19:48:16.013125Z"}, {"uuid": "c47fa3d4-c5d8-46ba-98c0-3d0eef282ee2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47294", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnaxygzp2q2r", "content": "\ud83d\udfe0 CVE-2026-47294 - High (8)\n\nDeserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47294/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-01T21:00:44.050187Z"}, {"uuid": "d94a4ce2-093d-4aef-8419-a4049c29b96c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47294", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1896", "content": "", "creation_timestamp": "2026-06-01T21:00:00.000000Z"}, {"uuid": "88b1bd8b-be18-4ab5-8001-73fa7eb5ee33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47299", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msv4zyml7g22", "content": "\ud83d\udd17 CVE : CVE-2026-47299, CVE-2026-57104, CVE-2026-65806, CVE-2026-6726, CVE-2026-6727, CVE-2026-70340, CVE-2026-47299, CVE-2026-57104, CVE-2026-65806, CVE-2026-6726, CVE-2026-6727, CVE-2026-70340", "creation_timestamp": "2026-08-12T12:30:16.833577Z"}, {"uuid": "673cdb10-e708-4af6-9a43-1f76a655298a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47294", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mncpthogo223", "content": "\ud83d\udd17 CVE : CVE-2026-42009, CVE-2026-47294, CVE-2026-42009, CVE-2026-47294", "creation_timestamp": "2026-06-02T13:40:06.703226Z"}, {"uuid": "9a6a567d-fd73-45aa-b669-8f6fa74a4cce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47117", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnd5hwnzk62l", "content": "CVE-2026-47117 - OpenMed\nCVE ID : CVE-2026-47117\n \n Published : June 2, 2026, 4:16 p.m. | 16\u00a0minutes ago\n \n Description : OpenMed before 1.5.2 contains a remote code execution vulnerability in the PII privacy-filter model loading path. The privacy-filter dispatcher used broad ...", "creation_timestamp": "2026-06-02T17:44:11.304362Z"}, {"uuid": "fb2c0ee0-c502-4607-8a29-5aa9a1afd7b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47117", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mndbqpkwoj23", "content": "\ud83d\udd34 CVE-2026-47117 - Critical (9.8)\n\nOpenMed before 1.5.2 contains a remote code execution vulnerability in the PII privacy-filter mod...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47117/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-02T19:00:42.221006Z"}, {"uuid": "cfcf2dde-864c-484b-96c1-f3de38d95e87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47265", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mndhkudytl24", "content": "CVE-2026-47265 - AIOHTTP vulnerable to cross-origin redirect with per-request cookies\nCVE ID : CVE-2026-47265\n \n Published : June 2, 2026, 6:32 p.m. | 1\u00a0hour, 52\u00a0minutes ago\n \n Description : AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior ...", "creation_timestamp": "2026-06-02T20:44:46.998891Z"}, {"uuid": "f7446685-0f75-4d01-9131-908ada7ac267", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47299", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T12:46:12.558033Z"}, {"uuid": "5f7db0b1-5b55-4e54-8cdf-ab6db6841c7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47100", "type": "seen", "source": "Telegram/vo-VgstXQuzhPYqY8B85GwxskfRMHrGkVpymMR7KirmWNUQ", "content": "", "creation_timestamp": "2026-05-28T15:00:16.000000Z"}, {"uuid": "5ffe514b-34c4-4023-9e58-b6db81b5841d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47285", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T12:45:38.650648Z"}, {"uuid": "7be8c1e9-9eaa-40be-b3e6-b188491ef11b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47201", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mndp5rge442i", "content": "\ud83d\udfe0 CVE-2026-47201 - High (8.5)\n\nauthentik is an open-source identity provider. Prior to versions 2025.12.5, 2026.2.3, and 2026.5....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47201/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-02T23:00:38.232582Z"}, {"uuid": "98c157f3-c99f-4e98-88b1-66a01a76888d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47201", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mndqqez4742e", "content": "CVE-2026-47201 - authentik: XML Signature Wrapping in SAML Source ACS allows authentication as arbitrary federated user\nCVE ID : CVE-2026-47201\n \n Published : June 2, 2026, 9:16 p.m. | 1\u00a0hour, 57\u00a0minutes ago\n \n Description : authentik is an open-source identity provider. Prior...", "creation_timestamp": "2026-06-02T23:28:55.704316Z"}, {"uuid": "5b269396-a148-4cdd-a8d0-ba244c1fcd2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47623", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msl6vsra472o", "content": "\ud83d\udccc CVE-2026-47623 - NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnera... https://www.cyberhub.blog/cves/CVE-2026-47623", "creation_timestamp": "2026-08-08T13:37:06.875772Z"}, {"uuid": "21820b07-0d95-453f-88f0-3d51f20fac37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47100", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mnexfpc6ht2e", "content": "CVE-2026-47100 Funnel Builder for WooCommerce Checkout\u306e\u8106\u5f31\u6027\u3092\u308f\u304b\u308a\u3084\u3059\u304f\u89e3\u8aac\uff5c\u5f71\u97ff\u7bc4\u56f2\u3068\u5bfe\u7b56\u307e\u3068\u3081\n\nCVE-2026-47100 Funnel Builder for WooCommerce Checkout\u306e\u30d0\u30fc\u30b8\u30e7\u30f33.15.0.3\u4ee5\u524d\u306b\u306f\u3001\u8a8d\u8a3c\u304c\u6b20\u843d\u3057\u3066\u3044\u308b\u8106\u5f31\u6027\u304c\u5b58\u5728\u3057\u307e\u3059\u3002", "creation_timestamp": "2026-06-03T11:00:54.328746Z"}, {"uuid": "8128ae64-23de-4df5-9a41-2448b8942b8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47065", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnf24u465g2o", "content": "CVE-2026-47065 - Apache MINA: Critical Deserialization Allow-list Bypass via resolveProxyClass - ZDRES-232\nCVE ID : CVE-2026-47065\n \n Published : June 3, 2026, 9:39 a.m. | 1\u00a0hour, 34\u00a0minutes ago\n \n Description : ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filt...", "creation_timestamp": "2026-06-03T11:49:46.053689Z"}, {"uuid": "258a00f9-74b6-4af8-9f05-ad8346c09aec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47265", "type": "seen", "source": "https://gist.github.com/alon710/9df1d7e2f4cb5ed041eded527313ebbc", "content": "# CVE-2026-47265: CVE-2026-47265: Cross-Origin Cookie Leakage in AIOHTTP Client Redirects\n\n> **CVSS Score:** 6.6\n> **Published:** 2026-06-03\n> **Full Report:** https://cvereports.com/reports/CVE-2026-47265\n\n## Summary\nAIOHTTP prior to version 3.14.0 fails to clear request-specific cookies when executing cross-origin automatic HTTP redirects. This vulnerability allows remote web servers to harvest sensitive credentials and session cookies originally scoped to an authorized target domain.\n\n## TL;DR\nAIOHTTP fails to clear the per-request `cookies` parameter during cross-origin redirects, causing sensitive cookies to be transmitted to untrusted third-party servers.\n\n## Technical Details\n\n- **CWE ID**: CWE-346: Origin Validation Error\n- **Attack Vector**: Network\n- **CVSS Score**: 6.6 (Medium)\n- **EPSS Score**: 0.00019 (Percentile: 5.36%)\n- **Impact**: High Confidentiality Loss (Credential Leakage)\n- **Exploit Status**: none\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- AIOHTTP asynchronous HTTP client framework\n- **aiohttp**: < 3.14.0 (Fixed in: `3.14.0`)\n\n## Mitigation\n\n- Upgrade aiohttp to version 3.14.0 or newer to ensure standard origin validation logic applies to local cookie variables.\n- Manually format the Cookie header inside the headers parameter as a temporary workaround if upgrading is not immediately possible.\n- Enforce network-level restrictions on outgoing requests or disable automatic redirect following (allow_redirects=False) when handling high-privilege credentials.\n\n**Remediation Steps:**\n1. Identify all microservices and automated Python scripts utilizing aiohttp for outbound HTTP calls.\n2. Analyze client instances to locate usage of client.get() or client.post() passing the 'cookies' parameter.\n3. Modify dependencies to target aiohttp >= 3.14.0.\n4. In legacy systems, refactor 'cookies' arguments into the 'headers' parameter as 'Cookie: key=value'.\n\n## References\n\n- [AIOHTTP Security Advisory](https://github.com/aio-libs/aiohttp/security/advisories/GHSA-hg6j-4rv6-33pg)\n- [CVE-2026-47265 Record](https://www.cve.org/CVERecord?id=CVE-2026-47265)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-47265) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-03T23:40:58.000000Z"}, {"uuid": "2f8311ee-d745-4374-996c-85d7081108e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47294", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnglprijtb2y", "content": "\ud83d\udccc CVE-2026-47294 - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-47294", "creation_timestamp": "2026-06-04T02:37:05.791472Z"}, {"uuid": "070c5438-fe3b-4ffa-b18c-0619a2cafd8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47065", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mngn33wfwh2l", "content": "\ud83d\udd34 CVE-2026-47065 - Critical (9.8)\n\nZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47065/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-04T03:01:20.628438Z"}, {"uuid": "3ff7e5c3-1763-4734-96af-b28124cfeef9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47065", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116690538662978843", "content": "It is possible to see elevated activities targeting Apache MINA (CVE-2026-47065) https://vuldb.com/vuln/368097/cti", "creation_timestamp": "2026-06-04T06:58:35.484412Z"}, {"uuid": "f83e0bba-8574-42af-8856-39cdb4863f5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47318", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnhgovcrqs2p", "content": "CVE-2026-47318 - Samsung rlottie Stack-Based Buffer Overflow\nCVE ID : CVE-2026-47318\n \n Published : June 4, 2026, 10:16 a.m. | 16\u00a0minutes ago\n \n Description : Stack-based buffer overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.\n\nThis issue affects ...", "creation_timestamp": "2026-06-04T10:39:47.524894Z"}, {"uuid": "17763284-6028-4698-bd7a-a8b7db37b98b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47306", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnhhfenxnv2e", "content": "CVE-2026-47306 - Samsung Open Source rlottie Uncontrolled Recursion\nCVE ID : CVE-2026-47306\n \n Published : June 4, 2026, 10:16 a.m. | 16\u00a0minutes ago\n \n Description : Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Oversized Serialized Data Payloads.\n...", "creation_timestamp": "2026-06-04T10:52:21.573376Z"}, {"uuid": "6156e31e-3163-4a39-9199-3449b4e3c60b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47319", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnhhjizpk72x", "content": "CVE-2026-47319 - Samsung rlottie Excessive Allocation Vulnerability\nCVE ID : CVE-2026-47319\n \n Published : June 4, 2026, 10:16 a.m. | 16\u00a0minutes ago\n \n Description : Memory allocation with excessive size value vulnerability in Samsung Open Source rlottie allows Excessive Alloc...", "creation_timestamp": "2026-06-04T10:54:40.357584Z"}, {"uuid": "b394441e-ceac-4cb7-9590-a3fbd2a8e1ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47320", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnhi6a6h2j2k", "content": "CVE-2026-47320 - Samsung rlottie Uninitialized Pointer and Uncontrolled Recursion Vulnerability\nCVE ID : CVE-2026-47320\n \n Published : June 4, 2026, 10:16 a.m. | 16\u00a0minutes ago\n \n Description : Access of uninitialized pointer, Uncontrolled Recursion vulnerability in Samsung Op...", "creation_timestamp": "2026-06-04T11:06:16.355305Z"}, {"uuid": "45dd3e0a-9042-4b10-beca-e98745347aa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47423", "type": "seen", "source": "https://t.me/GithubRedTeam/87264", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-47423-dompurify-xss-detector\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Galaxy-sc\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Go\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-04 10:34:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-06-04T11:02:16.000000Z"}, {"uuid": "004bf0d1-f944-46da-8aeb-d5c9b528646d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47707", "type": "seen", "source": "https://gist.github.com/alon710/010787d34dde83f4031b6f6c155ccffb", "content": "# CVE-2026-47707: CVE-2026-47707: GraphQL Alias Amplification Bypass in Strawberry GraphQL MaxAliasesLimiter\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-06-04\n> **Full Report:** https://cvereports.com/reports/CVE-2026-47707\n\n## Summary\nA security flaw in strawberry-graphql versions 0.172.0 through 0.315.6 allows unauthenticated attackers to bypass the MaxAliasesLimiter extension. By utilizing GraphQL fragment spreads, clients can trigger high levels of alias amplification, causing uncontrolled backend resource consumption and application-level Denial of Service.\n\n## TL;DR\nThe MaxAliasesLimiter extension in strawberry-graphql fails to account for fragment spreads during pre-execution static analysis. Attackers can bypass alias thresholds and trigger thousands of actual backend executions, leading to denial of service.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-400 (Uncontrolled Resource Consumption)\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1**: 5.3 (Medium)\n- **Exploit Status**: Proof-of-Concept Available\n- **KEV Status**: Not Listed\n- **Primary Impact**: Availability (Application-level Denial of Service)\n\n## Affected Systems\n\n- strawberry-graphql\n- **strawberry-graphql**: >= 0.172.0, < 0.315.7 (Fixed in: `0.315.7`)\n\n## Mitigation\n\n- Upgrade strawberry-graphql to version 0.315.7 or higher.\n- Disable the MaxAliasesLimiter extension in configuration files if immediate patching is not possible.\n- Deploy a Web Application Firewall (WAF) or validation layer to analyze incoming queries for redundant or highly nested fragment distributions.\n\n**Remediation Steps:**\n1. Identify all internal services employing strawberry-graphql in Python dependencies.\n2. Execute pip install --upgrade \"strawberry-graphql>=0.315.7\" or update your pyproject.toml / requirements.txt declarations.\n3. Verify that the GraphQL router initializes the MaxAliasesLimiter with safe max_alias_count configurations.\n4. Run regression testing to confirm that legitimate client operations using fragments continue to work as expected.\n\n## References\n\n- [GHSA-fr49-mhgj-crfc Advisory](https://github.com/strawberry-graphql/strawberry/security/advisories/GHSA-fr49-mhgj-crfc)\n- [Strawberry GraphQL Version 0.315.7 Release Notes](https://github.com/strawberry-graphql/strawberry/releases/tag/0.315.7)\n- [CVE-2026-47707 CVE Record](https://www.cve.org/CVERecord?id=CVE-2026-47707)\n- [Patch Commit a69221f](https://github.com/strawberry-graphql/strawberry/commit/a69221fb0b86583ceb5755758b294c8319021fd1)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-47707) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-04T15:20:57.000000Z"}, {"uuid": "9ba5165f-70f1-4dea-b4fb-07544e30419e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47706", "type": "seen", "source": "https://gist.github.com/alon710/e01fe3eef2f4071e63ac4580c1c830af", "content": "# CVE-2026-47706: CVE-2026-47706: Application-Level Denial of Service via Uncontrolled Recursion in Strawberry GraphQL\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-06-04\n> **Full Report:** https://cvereports.com/reports/CVE-2026-47706\n\n## Summary\nAn application-level Denial of Service vulnerability exists in the Strawberry GraphQL library (versions 0.71.0 through 0.315.6) due to uncontrolled recursion within the QueryDepthLimiter and MaxAliasesLimiter extensions when processing circular fragment references.\n\n## TL;DR\nA recursive fragment loop triggers a RecursionError in Python, crashing worker threads/processes and resulting in complete Denial of Service.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-674 / CWE-400\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 5.3 (Medium)\n- **Exploit Status**: Proof of Concept Available\n- **CISA KEV Status**: Not Listed\n- **Impact**: Availability (Denial of Service)\n\n## Affected Systems\n\n- Strawberry GraphQL\n- **strawberry-graphql**: >= 0.71.0, <= 0.315.6 (Fixed in: `0.315.7`)\n\n## Mitigation\n\n- Upgrade to strawberry-graphql version 0.315.7 or later\n- Temporarily disable QueryDepthLimiter and MaxAliasesLimiter\n- Validate incoming GraphQL queries at an API gateway layer\n\n**Remediation Steps:**\n1. Update the requirements.txt, poetry.lock, or Pipfile to specify strawberry-graphql>=0.315.7\n2. Run dependency installation tool (e.g., pip install --upgrade strawberry-graphql)\n3. Deploy updated container images to staging and production environments\n4. Verify validation rules reject circular fragments without throwing internal server errors\n\n## References\n\n- [GitHub Security Advisory GHSA-qfwv-87qj-98xq](https://github.com/strawberry-graphql/strawberry/security/advisories/GHSA-qfwv-87qj-98xq)\n- [Strawberry GraphQL Release v0.315.7](https://github.com/strawberry-graphql/strawberry/releases/tag/0.315.7)\n- [CVE-2026-47706 Record Database](https://www.cve.org/CVERecord?id=CVE-2026-47706)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-47706) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-04T16:10:59.000000Z"}, {"uuid": "8d3ef115-8d8f-4b13-8d49-d20387cee5b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47707", "type": "published-proof-of-concept", "source": "https://github.com/strawberry-graphql/strawberry/security/advisories/GHSA-fr49-mhgj-crfc", "content": "", "creation_timestamp": "2026-05-19T17:02:32.000000Z"}, {"uuid": "34797196-0ba6-4b3d-9615-f80953e7349a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47706", "type": "published-proof-of-concept", "source": "https://github.com/strawberry-graphql/strawberry/security/advisories/GHSA-qfwv-87qj-98xq", "content": "", "creation_timestamp": "2026-05-19T17:02:15.000000Z"}, {"uuid": "87fe8521-3ee0-4f66-b2d7-fda7a4ad3e88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47671", "type": "published-proof-of-concept", "source": "https://github.com/nhost/nhost/security/advisories/GHSA-64cj-qvx5-m4f3", "content": "", "creation_timestamp": "2026-05-19T11:17:06.000000Z"}, {"uuid": "aa1a1ec5-992a-40b6-b4d0-ee5ad1945818", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47676", "type": "seen", "source": "https://gist.github.com/alon710/9a85ace33b5f15b6d07a68897c3ce675", "content": "# CVE-2026-47676: CVE-2026-47676: Inconsistent Path Parsing and Slicing in Hono Framework Sub-Application Mounting\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-06-04\n> **Full Report:** https://cvereports.com/reports/CVE-2026-47676\n\n## Summary\nA path parsing and normalization inconsistency vulnerability exists in the Hono web framework prior to version 4.12.21. When hosting sub-applications via the app.mount() routing interface, Hono calculates the routing path prefix length on a percent-decoded representation of the URI but executes the path-slicing offset on the raw, percent-encoded string. This discrepancy results in malformed request paths being dispatched to mounted sub-applications, potentially leading to route bypasses, route confusion, and application-level Denial of Service.\n\n## TL;DR\nAn inconsistency between decoded prefix matching and raw path-slicing in Hono's app.mount() causes malformed path propagation and routing failures when processing percent-encoded multi-byte URI characters.\n\n## Technical Details\n\n- **CWE ID**: CWE-444 (Inconsistent Interpretation of HTTP Requests)\n- **Attack Vector**: Network (AV:N)\n- **CVSS Severity**: 5.3 Medium\n- **Exploit Status**: Proof of Concept available in test suites\n- **KEV Status**: Not listed\n- **Ransomware Use**: No known usage\n\n## Affected Systems\n\n- Hono framework web applications running on Node.js, Bun, Deno, or Cloudflare Workers\n- **hono**: < 4.12.21 (Fixed in: `4.12.21`)\n\n## Mitigation\n\n- Upgrade Hono dependencies to version 4.12.21 or higher\n- Ensure all mount prefixes are defined strictly using Unicode literals rather than percent-encoded strings\n- Implement a global catch-all exception handler to catch unhandled URIErrors resulting from malformed HTTP paths\n\n**Remediation Steps:**\n1. Identify all projects utilizing Hono by running 'npm ls hono' or equivalent package manager commands\n2. Update the project package.json to require 'hono': '^4.12.21' or higher\n3. Execute the package manager install command to apply the update ('npm install' or 'pnpm install')\n4. Review codebase usage of 'app.mount' to ensure prefixes do not contain hardcoded percent-encoded characters\n5. Re-deploy the application to production and run regression tests containing non-ASCII route characters\n\n## References\n\n- [Hono Security Advisory GHSA-2gcr-mfcq-wcc3](https://github.com/honojs/hono/security/advisories/GHSA-2gcr-mfcq-wcc3)\n- [Fix Commit 6cbb025](https://github.com/honojs/hono/commit/6cbb025ff87fca1a3d00d0ccca0eaf3a6385c3f1)\n- [CVE-2026-47676 Record](https://www.cve.org/CVERecord?id=CVE-2026-47676)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-47676) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-04T18:41:16.000000Z"}, {"uuid": "a4b181c7-1aee-421d-8a84-ebc1516b0bb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47696", "type": "seen", "source": "https://gist.github.com/alon710/8d83dcf8c5f6eaceac335292cf54a077", "content": "# CVE-2026-47696: CVE-2026-47696: Authenticated Wallet Credit Bypass in WWBN AVideo AuthorizeNet Plugin\n\n> **CVSS Score:** 7.1\n> **Published:** 2026-06-04\n> **Full Report:** https://cvereports.com/reports/CVE-2026-47696\n\n## Summary\nAn authenticated wallet credit bypass vulnerability exists in WWBN AVideo version 29.0 and earlier. The AuthorizeNet plugin includes an unfinished mockup endpoint, processPayment.json.php, which lacks actual transaction verification and hardcodes success. This allows any authenticated user to credit their wallet with arbitrary balances without making any payments.\n\n## TL;DR\nAuthenticated users can inject arbitrary virtual funds into their wallets due to a hardcoded payment success flag and missing API validation in a placeholder endpoint.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-345\n- **Attack Vector**: Network\n- **CVSS v4.0**: 7.1\n- **CVSS v3.1**: 4.3\n- **Exploit Status**: PoC\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- WWBN AVideo version 29.0 and earlier with AuthorizeNet and YPTWallet plugins enabled\n- **AVideo**: <= 29.0 (Fixed in: `Commit 8224024`)\n\n## Mitigation\n\n- Upgrade WWBN AVideo to a patched version\n- Manually delete the processPayment.json.php file\n- Disable the AuthorizeNet plugin if not in use\n\n**Remediation Steps:**\n1. Locate the file at plugin/AuthorizeNet/processPayment.json.php\n2. Verify the file contents match the vulnerable placeholder logic\n3. Delete the file from the filesystem\n4. Restart the web server or clear application cache if necessary\n\n## References\n\n- [GitHub Security Advisory GHSA-9392-pj54-qqf8](https://github.com/WWBN/AVideo/security/advisories/GHSA-9392-pj54-qqf8)\n- [Patch Commit deleting processPayment.json.php](https://github.com/WWBN/AVideo/commit/822402444b4db4e9442779c8c789ffe5312b3627)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-47696) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-04T19:40:55.000000Z"}, {"uuid": "a01ddf88-c4d5-486a-aac8-69429bbebe7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47696", "type": "seen", "source": "https://gist.github.com/alon710/94ad07ac90371ecb50e3be0d7c9cdb9e", "content": "# CVE-2026-47696: CVE-2026-47696: Authenticated Wallet Credit Bypass in WWBN AVideo AuthorizeNet Plugin\n\n> **CVSS Score:** 7.1\n> **Published:** 2026-06-04\n> **Full Report:** https://cvereports.com/reports/CVE-2026-47696\n\n## Summary\nAn authenticated wallet credit bypass vulnerability exists in WWBN AVideo version 29.0 and earlier. The AuthorizeNet plugin includes an unfinished mockup endpoint, processPayment.json.php, which lacks actual transaction verification and hardcodes success. This allows any authenticated user to credit their wallet with arbitrary balances without making any payments.\n\n## TL;DR\nAuthenticated users can inject arbitrary virtual funds into their wallets due to a hardcoded payment success flag and missing API validation in a placeholder endpoint.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-345\n- **Attack Vector**: Network\n- **CVSS v4.0**: 7.1\n- **CVSS v3.1**: 4.3\n- **Exploit Status**: PoC\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- WWBN AVideo version 29.0 and earlier with AuthorizeNet and YPTWallet plugins enabled\n- **AVideo**: <= 29.0 (Fixed in: `Commit 8224024`)\n\n## Mitigation\n\n- Upgrade WWBN AVideo to a patched version\n- Manually delete the processPayment.json.php file\n- Disable the AuthorizeNet plugin if not in use\n\n**Remediation Steps:**\n1. Locate the file at plugin/AuthorizeNet/processPayment.json.php\n2. Verify the file contents match the vulnerable placeholder logic\n3. Delete the file from the filesystem\n4. Restart the web server or clear application cache if necessary\n\n## References\n\n- [GitHub Security Advisory GHSA-9392-pj54-qqf8](https://github.com/WWBN/AVideo/security/advisories/GHSA-9392-pj54-qqf8)\n- [Patch Commit deleting processPayment.json.php](https://github.com/WWBN/AVideo/commit/822402444b4db4e9442779c8c789ffe5312b3627)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-47696) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-04T19:50:59.000000Z"}, {"uuid": "139f6149-0476-49d4-aac7-9ba5abf8f944", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47694", "type": "published-proof-of-concept", "source": "https://github.com/WWBN/AVideo/security/advisories/GHSA-c8h8-vq34-9fw2", "content": "", "creation_timestamp": "2026-05-19T14:46:04.000000Z"}, {"uuid": "44d08af3-49f5-4af1-b830-e22a855c0e9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47696", "type": "published-proof-of-concept", "source": "https://github.com/WWBN/AVideo/security/advisories/GHSA-9392-pj54-qqf8", "content": "", "creation_timestamp": "2026-05-19T15:01:00.000000Z"}, {"uuid": "cc2d6a40-35fd-4bdc-8cec-c90c2b04234e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47708", "type": "published-proof-of-concept", "source": "https://github.com/SepineTam/mcp-for-stata/security/advisories/GHSA-4p62-hqp5-g644", "content": "", "creation_timestamp": "2026-05-19T16:51:59.000000Z"}, {"uuid": "d2079be1-8849-431a-9bcf-0ca3478a16fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47201", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnivi62a7v25", "content": "\ud83d\udccc CVE-2026-47201 - authentik is an open-source identity provider. Prior to versions 2025.12.5, 2026.2.3, and 2026.5.1, authentik's SAML Source ACS endpoint is vulnerable... https://www.cyberhub.blog/cves/CVE-2026-47201", "creation_timestamp": "2026-06-05T00:37:07.460619Z"}, {"uuid": "3a0c4474-0fdf-431f-a868-fb1154e772cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47114", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mnjyezeuae22", "content": "CVE-2026-47114 IINA 1.4.3\u4ee5\u524d\u306e\u8106\u5f31\u6027\u3092\u308f\u304b\u308a\u3084\u3059\u304f\u89e3\u8aac\uff5c\u5f71\u97ff\u7bc4\u56f2\u3068\u5bfe\u7b56\u307e\u3068\u3081\n\nCVE-2026-47114 \u3053\u306e\u8106\u5f31\u6027\u306f\u3001IINA 1.4.3\u4ee5\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u5b58\u5728\u3057\u3001\u30e6\u30fc\u30b6\u30fc\u304c\u652f\u63f4\u3059\u308b\u5f62\u3067\u30b3\u30de\u30f3\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u306a\u8106\u5f31\u6027\u3067\u3059\u3002", "creation_timestamp": "2026-06-05T11:01:43.592063Z"}, {"uuid": "550a5fee-b21b-4708-ab7a-6d609d8e42bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47684", "type": "published-proof-of-concept", "source": "https://github.com/Sync-in/server/security/advisories/GHSA-q4x5-8cj6-52wg", "content": "", "creation_timestamp": "2026-05-22T10:29:52.000000Z"}, {"uuid": "81ca0a65-a675-4386-897f-f3ead497839a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47670", "type": "published-proof-of-concept", "source": "https://github.com/dbgate/dbgate/security/advisories/GHSA-wm5r-5qp3-5vxf", "content": "", "creation_timestamp": "2026-05-20T09:31:12.000000Z"}, {"uuid": "97a600b2-28d4-43ce-98cb-2aa65b4e5bc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47669", "type": "published-proof-of-concept", "source": "https://github.com/dbgate/dbgate/security/advisories/GHSA-h535-j5hr-mv56", "content": "", "creation_timestamp": "2026-05-20T09:30:38.000000Z"}, {"uuid": "7b7d5ef5-3573-420e-be3e-4a58f59c958c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47668", "type": "published-proof-of-concept", "source": "https://github.com/dbgate/dbgate/security/advisories/GHSA-8v3q-9vmx-36vc", "content": "", "creation_timestamp": "2026-05-20T09:31:29.000000Z"}, {"uuid": "012948d0-c832-46d5-9d51-f8b1593d4806", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47774", "type": "seen", "source": "https://bsky.app/profile/feed.igeek.gamer-geek-news.com.ap.brid.gy/post/3mnku5k7vfvy2", "content": "\ud83d\udc27 **Releases of Istio 1.30.1, 1.29.4, and 1.28.8 (CVE-2026-47774)**\n\nServer software mostly\n\n\ud83d\udcf0 Source: Tux Machines\n\ud83d\udd17 Link: https://tuxmachines.org/n/2026/06/05/Releases_of_Istio_1_30_1_1_29_4_and_1_28_8_CVE_2026_47774.shtml", "creation_timestamp": "2026-06-05T19:18:47.131219Z"}, {"uuid": "b4c5141b-1bbe-4db3-a148-f62b8c3034fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47250", "type": "published-proof-of-concept", "source": "https://github.com/Flux159/mcp-server-kubernetes/security/advisories/GHSA-6mx4-4h42-r8vh", "content": "", "creation_timestamp": "2026-05-22T16:59:07.000000Z"}, {"uuid": "06280e8b-d5c4-44e0-af98-2e28ba40c834", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47249", "type": "published-proof-of-concept", "source": "https://github.com/klever-io/klever-go/security/advisories/GHSA-w342-mj6g-v9c4", "content": "", "creation_timestamp": "2026-06-02T10:30:29.000000Z"}, {"uuid": "494ac0d1-486f-4b1b-88ac-80e53d527d51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47731", "type": "published-proof-of-concept", "source": "https://github.com/NASA-AMMOS/AIT-Core/security/advisories/GHSA-p462-prxw-mjx4", "content": "", "creation_timestamp": "2026-05-19T22:10:29.000000Z"}, {"uuid": "a1d62582-b5ed-4045-8ae8-4b767d1f9661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://gist.github.com/hinataconsult/4a2ff9687fd523da37275e8423328e65", "content": "\n\n\n\n\n\u751f\u6210AI\u6700\u65b0\u30cb\u30e5\u30fc\u30b9 2026\u5e746\u67081\u65e5\u301c6\u67087\u65e5\n\n  :root{\n    --green1:#1B512D;\n    --green2:#7FB069;\n    --earth1:#E6AA68;\n    --earth2:#A67458;\n    --light:#F3F9E3;\n    --paper:#FBF7EC;\n  }\n  *{box-sizing:border-box;}\n  html,body{margin:0;padding:0;}\n  body{\n    font-family:\"Hiragino Kaku Gothic ProN\",\"Hiragino Sans\",\"Yu Gothic\",\"Meiryo\",system-ui,sans-serif;\n    background:\n      radial-gradient(circle at 12% 8%, rgba(127,176,105,.18) 0, transparent 35%),\n      radial-gradient(circle at 88% 92%, rgba(230,170,104,.18) 0, transparent 38%),\n      var(--paper);\n    color:#2A3622;\n    line-height:1.85;\n    min-height:100vh;\n  }\n  .wrap{\n    max-width:880px;\n    margin:0 auto;\n    padding:48px 28px 96px;\n    position:relative;\n  }\n  .leaf{\n    position:absolute;width:120px;height:120px;opacity:.18;pointer-events:none;\n  }\n  .leaf.tl{top:14px;left:-10px;transform:rotate(-25deg);}\n  .leaf.br{bottom:36px;right:-12px;transform:rotate(155deg);}\n  header{\n    text-align:center;\n    padding:36px 24px 28px;\n    border-radius:22px;\n    background:linear-gradient(145deg,rgba(127,176,105,.18) 0,rgba(243,249,227,.6) 60%,rgba(230,170,104,.18) 100%);\n    border:1px solid rgba(27,81,45,.18);\n    position:relative;\n    overflow:hidden;\n  }\n  header::before{\n    content:\"\";position:absolute;left:0;right:0;top:0;height:6px;\n    background:repeating-linear-gradient(135deg,var(--green1) 0 14px,var(--green2) 14px 28px,var(--earth1) 28px 42px,var(--earth2) 42px 56px);\n    opacity:.7;\n  }\n  h1{\n    font-size:30px;margin:14px 0 6px;color:var(--green1);letter-spacing:.02em;\n  }\n  .subtitle{\n    font-size:14px;color:var(--earth2);margin-top:2px;\n  }\n  .sundrop{\n    width:46px;height:46px;display:inline-block;border-radius:50%;\n    background:radial-gradient(circle at 30% 30%,#FFE8B3 0,var(--earth1) 60%,var(--green2) 100%);\n    box-shadow:0 6px 18px rgba(166,116,88,.25);\n    margin-bottom:6px;\n  }\n  .divider{\n    display:flex;align-items:center;justify-content:center;\n    margin:42px 0 18px;color:var(--green1);\n    font-size:14px;letter-spacing:.4em;\n  }\n  .divider::before,.divider::after{\n    content:\"\";flex:1;height:1px;\n    background:linear-gradient(90deg,transparent,var(--green2),transparent);\n    margin:0 16px;\n  }\n  .vine{\n    text-align:center;margin:8px 0 30px;color:var(--green2);font-size:18px;letter-spacing:.6em;\n  }\n  article{\n    background:#FFFFFFCC;\n    border-radius:18px;\n    padding:24px 26px 22px;\n    margin:0 0 22px;\n    border-left:5px solid var(--green2);\n    box-shadow:0 6px 18px rgba(27,81,45,.06);\n    position:relative;\n    transition:transform .15s ease;\n  }\n  article:hover{transform:translateY(-1px);}\n  article:nth-child(even){\n    border-left-color:var(--earth1);\n    background:#FBF7ECCC;\n  }\n  .num{\n    display:inline-flex;align-items:center;justify-content:center;\n    width:36px;height:36px;border-radius:50%;\n    background:var(--green1);color:#fff;font-weight:700;font-size:16px;\n    margin-right:12px;vertical-align:middle;\n    box-shadow:inset 0 -3px 0 rgba(0,0,0,.12);\n  }\n  article:nth-child(even) .num{\n    background:var(--earth2);\n  }\n  h2{\n    font-size:18px;margin:0 0 12px;color:var(--green1);display:flex;align-items:center;\n    line-height:1.5;\n  }\n  article:nth-child(even) h2{color:var(--earth2);}\n  p{margin:0;font-size:15px;color:#33402A;}\n  .leaf-mini{\n    position:absolute;right:14px;top:14px;width:22px;height:22px;opacity:.5;\n  }\n  footer{\n    margin-top:48px;padding-top:24px;text-align:center;font-size:12px;color:var(--earth2);\n    border-top:1px dashed rgba(27,81,45,.25);\n  }\n  .footer-leaf{display:block;margin:0 auto 8px;width:40px;height:18px;}\n\n\n\n\n\n  \n  \n  \n\n    \n\n    \n\u751f\u6210AI\u6700\u65b0\u30cb\u30e5\u30fc\u30b9\n    \n2026\u5e746\u67081\u65e5 \u301c 6\u67087\u65e5\n  \n\n  \nTODAY'S HARVEST\n  \n\u2740 \u2740 \u2740\n\n  \n\n    \n1OpenAI Codex\u306b\u300c\u8077\u7a2e\u5225\u30d7\u30e9\u30b0\u30a4\u30f3\u300d\u3068\u516c\u958b\u30db\u30b9\u30c6\u30a3\u30f3\u30b0\u6a5f\u80fd\n    \nOpenAI\u304cCodex\u30a2\u30d7\u30ea\u306bData Analysis\u3001Creative\u3001Sales\u3001Product Design\u3001Investing\u3001Investment Banking\u306e6\u30d7\u30e9\u30b0\u30a4\u30f3\u3092\u8ffd\u52a0\u3057\u307e\u3057\u305f\u3002\u300c\u30c0\u30c3\u30b7\u30e5\u30dc\u30fc\u30c9\u4f5c\u3063\u3066\u300d\u3068\u983c\u3080\u3060\u3051\u3067\u5404\u8077\u7a2e\u306e\u6a19\u6e96\u696d\u52d9\u304c\u56de\u308a\u3001\u4f5c\u3063\u305f\u6210\u679c\u7269\u3092\u30db\u30b9\u30c6\u30a3\u30f3\u30b0\u3057\u3066\u5171\u6709\u3067\u304d\u308b\u300cCodex Sites\u300d\u3082\u540c\u6642\u516c\u958b\uff08Business/Enterprise\u30d7\u30e9\u30f3\u5411\u3051\uff09\u3002\u9031\u9593\u30a2\u30af\u30c6\u30a3\u30d6\u30e6\u30fc\u30b6\u30fc\u306f\u7d04500\u4e07\u4eba\u3067\u3001\u3046\u30612\u5272\u304c\u975e\u30a8\u30f3\u30b8\u30cb\u30a2\u3060\u3068OpenAI\u304c\u767a\u8868\u3057\u3066\u3044\u307e\u3059\u3002\n  \n\n  \n\n    \n2ChatGPT\u306e\u8a18\u61b6\u304c\u300cDreaming V3\u300d\u3067\u5225\u7269\u306b\u9032\u5316\n    \nOpenAI\u304cChatGPT\u306e\u30e1\u30e2\u30ea\u6a5f\u80fd\u3092\u5237\u65b0\u3059\u308b\u300cDreaming V3\u300d\u3092\u516c\u958b\u3057\u307e\u3057\u305f\u3002\u5bdd\u3066\u3044\u308b\u9593\u306b\u904e\u53bb\u4f1a\u8a71\u3092\u81ea\u52d5\u6574\u7406\u3059\u308b\u30a4\u30e1\u30fc\u30b8\u3067\u3001\u4e8b\u5b9f\u306e\u60f3\u8d77\u7cbe\u5ea6\u304c\u7d044\u5272\u304b\u30898\u5272\u8d85\u3001\u597d\u307f\u3084\u5236\u7d04\u306e\u53cd\u6620\u304c3\u5272\u304b\u30897\u5272\u8d85\u3001\u6642\u9593\u7d4c\u904e\u306b\u5fdc\u3058\u305f\u72b6\u614b\u66f4\u65b0\u306f1\u5272\u304b\u308975%\u3078\u5927\u5e45\u5411\u4e0a\u3002\u7c73\u56fd\u306eChatGPT Plus\u52a0\u5165\u8005\u3068Pro\u304b\u3089\u6bb5\u968e\u5c55\u958b\u3067\u3001\u65e5\u672c\u306e\u30e6\u30fc\u30b6\u30fc\u3082\u6570\u9031\u9593\u4ee5\u5185\u306b\u4f53\u611f\u3067\u304d\u308b\u898b\u8fbc\u307f\u3067\u3059\u3002\n  \n\n  \n\n    \n3Microsoft Scout\u300124\u6642\u9593\u52d5\u304f\u300c\u521d\u306eAutopilot\u300d\u304c\u59cb\u52d5\n    \nMicrosoft\u304cCopilot\uff08\u526f\u64cd\u7e26\u58eb\uff09\u3067\u306f\u306a\u304f\u5b8c\u5168\u81ea\u8d70\u306e\u65b0\u30ab\u30c6\u30b4\u30ea\u300cAutopilots\u300d\u3092\u767a\u8868\u3057\u3001\u7b2c\u4e00\u5f3e\u3068\u3057\u3066Microsoft Scout\u3092\u516c\u958b\u3057\u307e\u3057\u305f\u3002Outlook\u3068Microsoft Teams\u3092\u5e38\u6642\u76e3\u8996\u3057\u3066\u4f1a\u8b70\u8cc7\u6599\u306e\u4e8b\u524d\u6e96\u5099\u3084\u4e88\u5b9a\u885d\u7a81\u306e\u81ea\u52d5\u89e3\u6d88\u3001\u30e1\u30fc\u30eb\u4e0b\u66f8\u304d\u306a\u3069\u3092\u4eba\u306e\u6307\u793a\u306a\u3057\u3067\u9032\u3081\u307e\u3059\u3002\u72ec\u81eaID\u3092\u6301\u3061\u4ed6\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u3068\u9023\u643a\u3059\u308b\u8a2d\u8a08\u3067\u3001Frontier\u30d7\u30ed\u30b0\u30e9\u30e0\u53c2\u52a0\u7d44\u7e54\u3067\u9650\u5b9a\u30d7\u30ec\u30d3\u30e5\u30fc\u304c\u59cb\u307e\u3063\u3066\u3044\u307e\u3059\u3002\n  \n\n  \n\n    \n4GitHub Copilot\u304cMAI-Code-1-Flash\u3092\u9078\u629e\u53ef\u80fd\u306b\n    \nMicrosoft\u304cGitHub Copilot\u306eVisual Studio Code\u5411\u3051\u30e2\u30c7\u30eb\u30d4\u30c3\u30ab\u30fc\u306b\u81ea\u793e\u958b\u767a\u306eMAI-Code-1-Flash\u3092\u8ffd\u52a0\u3057\u307e\u3057\u305f\u3002\u308f\u305a\u304b5B\u306eactive\u30d1\u30e9\u30e1\u30fc\u30bf\u3067SWE Bench Pro 51%\u3068\u3044\u3046\u52b9\u7387\u91cd\u8996\u306e\u8a2d\u8a08\u3067\u3001\u8efd\u3044\u4fee\u6b63\u3084\u30ea\u30d5\u30a1\u30af\u30bf\u306b\u306f\u5341\u5206\u306a\u6027\u80fd\u3002OpenAI\u30e2\u30c7\u30eb\u4e00\u8fba\u5012\u3060\u3063\u305fGitHub Copilot\u3067\u300cMicrosoft\u72ec\u81ea\u30e2\u30c7\u30eb\u300d\u3092\u9078\u3079\u308b\u6642\u4ee3\u306b\u5165\u308a\u3001\u30b3\u30b9\u30c8\u9762\u306e\u9078\u629e\u80a2\u3082\u5e83\u304c\u308a\u307e\u3059\u3002\n  \n\n  \n\n    \n5Microsoft IQ\u304c\u793e\u5185\u30c7\u30fc\u30bf\u306e\u300c4\u5c64\u300d\u69cb\u9020\u3067\u4e00\u822c\u63d0\u4f9b\u958b\u59cb\n    \nMicrosoft\u304cGitHub Copilot\u3001Microsoft Foundry\u3001Microsoft Copilot Studio\u3067Microsoft IQ\u3092\u4e00\u822c\u63d0\u4f9b\u3057\u307e\u3057\u305f\u3002Web IQ\uff08\u6700\u65b0\u30a6\u30a7\u30d6\u60c5\u5831\uff09\u3001Public IQ\uff08PowerBI\u306a\u3069\u306e\u696d\u52d9\u30c7\u30fc\u30bf\uff09\u3001Work IQ\uff08Outlook\u3084Microsoft Teams\u306e\u793e\u5185\u30c7\u30fc\u30bf\uff09\u3001Foundry IQ\uff08\u30e1\u30bf\u5c64\uff09\u306e4\u5c64\u3067\u3001\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u304c\u793e\u5185\u5916\u306e\u77e5\u8b58\u3092\u9ad8\u7cbe\u5ea6\u306b\u5f15\u304d\u51fa\u305b\u307e\u3059\u3002AI\u304c\u300c\u793e\u5185\u30b0\u30b0\u308b\u300d\u304c\u6a19\u6e96\u6a5f\u80fd\u306b\u306a\u308a\u307e\u3059\u3002\n  \n\n  \nMORE PETALS\n  \n\u2740 \u2740 \u2740\n\n  \n\n    \n6Microsoft Copilot\u30b9\u30fc\u30d1\u30fc\u30a2\u30d7\u30ea\u304c\u4eca\u590f\u30ed\u30fc\u30f3\u30c1\u4e88\u5b9a\n    \nMicrosoft\u304c\u4e71\u7acb\u3059\u308b\u5404\u7a2eCopilot\uff08Microsoft 365 Copilot\u3001GitHub Copilot\u3001Microsoft Copilot Studio\u307b\u304b\uff09\u30921\u3064\u306b\u675f\u306d\u308b\u300cCopilot Super App\u300d\u3092\u4e88\u544a\u3057\u307e\u3057\u305f\u3002\u30c6\u30ca\u30f3\u30c8\u5185\u30c7\u30fc\u30bf\u3001\u30d6\u30e9\u30a6\u30b6\u3001\u696d\u52d9\u30a2\u30d7\u30ea\u3092\u6a2a\u65ad\u3057\u3001\u3072\u3068\u3064\u306e\u6307\u793a\u3067PowerPoint\u6574\u5f62\u3001Excel\u96c6\u8a08\u3001Microsoft Teams\u6295\u7a3f\u307e\u3067\u3092\u5b8c\u7d50\u3055\u305b\u308b\u69cb\u60f3\u3067\u3059\u3002\u4eca\u590f\u30ea\u30ea\u30fc\u30b9\u4e88\u5b9a\u3067CEO\u304c\u7e70\u308a\u8fd4\u3057\u5f37\u8abf\u3059\u308b\u91cd\u70b9\u65bd\u7b56\u3067\u3059\u3002\n  \n\n  \n\n    \n7xAI\u306eGrok\u304cVoice\u3068Imagine 1.5 Preview API\u3092\u516c\u958b\n    \nxAI\u304cGrok Voice\uff08\u97f3\u58f0\u5bfe\u8a71\u30e2\u30c7\u30eb\uff09\u3068Grok Imagine 1.5 Preview\uff08\u753b\u50cf\u751f\u6210\uff09\u306eAPI\u3092\u516c\u958b\u3057\u307e\u3057\u305f\u3002SNS\u306eX\u304b\u3089\u30b7\u30fc\u30e0\u30ec\u30b9\u306b\u9023\u643a\u3067\u304d\u3001\u958b\u767a\u8005\u304c\u305d\u306e\u307e\u307e\u65e2\u5b58\u30b5\u30fc\u30d3\u30b9\u306b\u7d44\u307f\u8fbc\u3081\u307e\u3059\u3002\u3042\u308f\u305b\u3066\u30b3\u30fc\u30c7\u30a3\u30f3\u30b0\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8Grok Build 0.1\u304cGit Worktrees\u5bfe\u5fdc\u3068\u306a\u308a\u3001\u8907\u6570\u30d6\u30e9\u30f3\u30c1\u3092\u4e26\u5217\u3067\u6271\u3048\u308b\u8a2d\u8a08\u306b\u3002Grok\u306e\u6a5f\u80fd\u62e1\u5f35\u30e9\u30c3\u30b7\u30e5\u304c\u7d9a\u3044\u3066\u3044\u307e\u3059\u3002\n  \n\n  \n\n    \n8OpenAI\u306eGPT-Rosalind\u306b\u65b0\u6a5f\u80fd\u3001\u5275\u85ac\u3068\u516c\u8846\u885b\u751f\u3067\u524d\u9032\n    \nOpenAI\u304c\u30e9\u30a4\u30d5\u30b5\u30a4\u30a8\u30f3\u30b9\u5411\u3051\u30e2\u30c7\u30ebGPT-Rosalind\u3092\u5927\u5e45\u5f37\u5316\u3057\u307e\u3057\u305f\u3002\u533b\u85ac\u54c1\u5316\u5b66\u3068\u30b2\u30ce\u30e0\u89e3\u6790\u3092\u542b\u3080\u5275\u85ac\u30ef\u30fc\u30af\u30d5\u30ed\u30fc\u3092\u9577\u6642\u9593\u6a2a\u65ad\u3067\u5b9f\u884c\u3067\u304d\u3001\u5b9a\u91cf\u751f\u7269\u5b66\u30bf\u30b9\u30af\u3067\u4f7f\u7528\u30c8\u30fc\u30af\u30f3\u91cf\u3092\u7d043\u5272\u524a\u6e1b\u3002Johns Hopkins Applied Physics Laboratory\u3084CEPI\u306a\u3069\u516c\u8846\u885b\u751f\u7d44\u7e54\u3078\u306e\u63d0\u4f9b\u7bc4\u56f2\u3082\u62e1\u5927\u3057\u3001\u30d1\u30f3\u30c7\u30df\u30c3\u30af\u5bfe\u7b56\u306e\u65e9\u671f\u8b66\u6212\u3084\u5bfe\u7b56\u958b\u767a\u306b\u76f4\u7d50\u3057\u307e\u3059\u3002\n  \n\n  \n\n    \n9OpenAI\u30d5\u30ed\u30f3\u30c6\u30a3\u30a2\u30e2\u30c7\u30eb\u3068Codex\u304cAWS\u3067\u4e00\u822c\u63d0\u4f9b\u958b\u59cb\n    \nOpenAI\u304cAmazon Web Services\u3067\u30d5\u30ed\u30f3\u30c6\u30a3\u30a2\u30e2\u30c7\u30eb\u7fa4\u3068Codex\u306eGA\u63d0\u4f9b\u3092\u958b\u59cb\u3057\u307e\u3057\u305f\u3002AWS Marketplace\u306e\u65e2\u5b58\u5951\u7d04\u30fb\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u8abf\u9054\u30fb\u8ab2\u91d1\u30fb\u30ac\u30d0\u30ca\u30f3\u30b9\u306e\u67a0\u7d44\u307f\u3067\u305d\u306e\u307e\u307eOpenAI\u304c\u4f7f\u3048\u3001\u30a8\u30f3\u30bf\u30fc\u30d7\u30e9\u30a4\u30ba\u306e\u5c0e\u5165\u6469\u64e6\u304c\u4e00\u6bb5\u4e0b\u304c\u308a\u307e\u3059\u3002Microsoft Azure\u504f\u91cd\u3060\u3063\u305f\u914d\u4fe1\u7db2\u306b\u660e\u78ba\u306a\u300c\u7b2c\u4e8c\u306e\u6a19\u6e96\u30eb\u30fc\u30c8\u300d\u304c\u8a95\u751f\u3057\u305f\u5f62\u3067\u3059\u3002\n  \n\n  \n\n    \n10Anthropic\u304cClaude Mythos Preview\u3092\u30a4\u30f3\u30d5\u30e9\u4e8b\u696d\u8005\u306b\u3082\u958b\u653e\n    \nAnthropic\u304cProject Glasswing\u3068\u3044\u3046\u67a0\u7d44\u307f\u3067Claude Mythos Preview\u306e\u5229\u7528\u7bc4\u56f2\u3092\u62e1\u5927\u3057\u307e\u3057\u305f\u3002\u96fb\u529b\u3001\u6c34\u9053\u3001\u533b\u7642\u3001\u901a\u4fe1\u3001\u30cf\u30fc\u30c9\u30a6\u30a7\u30a2\u306a\u306915\u304b\u56fd\u8d85\u306e\u91cd\u8981\u30a4\u30f3\u30d5\u30e9\u4e8b\u696d\u8005\u7d04150\u7d44\u7e54\u304c\u3001\u81ea\u793e\u30b3\u30fc\u30c9\u30d9\u30fc\u30b9\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30b9\u30ad\u30e3\u30f3\u306b\u5229\u7528\u3067\u304d\u307e\u3059\u3002Mythos Preview\u306fFreeBSD\u3067\u9577\u5e74\u6b8b\u3063\u3066\u3044\u305f\u8106\u5f31\u6027\uff08CVE-2026-4747\uff09\u3092\u81ea\u5f8b\u767a\u898b\u3057\u305f\u5b9f\u7e3e\u304c\u3042\u308a\u307e\u3059\u3002\n  \n\n  \n\n    \n    \u751f\u6210AI\u9031\u6b21\u30cb\u30e5\u30fc\u30b9 \uff0f \u81ea\u7136\u3068\u5faa\u74b0\u3059\u308b\u30c6\u30af\u30ce\u30ed\u30b8\u30fc\n  \n\n\n\n", "creation_timestamp": "2026-06-07T09:53:54.000000Z"}, {"uuid": "b1026ec2-d6bf-46f9-8b0e-9aa65c85797a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47430", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mnp7ql7avr2p", "content": "CVE-2026-47430: Cordova Plugin InAppBrowser: iOS: Arbitrary Cordova callback IDs can be dispatched without validation from InAppBrowser WebViews", "creation_timestamp": "2026-06-07T12:56:45.574112Z"}, {"uuid": "204828ac-eb7e-4791-aaec-a43350c0128b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47429", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mnqcloetts2r", "content": "JavaScript \u30c6\u30b9\u30c8\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af Vitest\u306b\u91cd\u5927\u306a\u8106\u5f31\u6027(VE-2026-47428,CVE-2026-47429,CVE\u672a\u63a1\u756a)\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews", "creation_timestamp": "2026-06-07T23:20:25.452654Z"}, {"uuid": "8cfe1c5c-9886-4f45-a4d3-b47a06e5770a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtjcswsxer22", "content": "CVE-2026-47301: PoC Exploit Achieves SYSTEM-Level Code Execution in SCCM", "creation_timestamp": "2026-08-20T13:06:57.771998Z"}, {"uuid": "b25412cf-6969-44e3-9e47-3be9e0a0f876", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47876", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117083157864143789", "content": "\ud83d\udcf0 VMware Patches Critical VM Escape Flaw (CVE-2026-47876) in ESXi\nBroadcom patches critical VMware flaws, including a VM escape in ESXi (CVE-2026-47876) and unauthenticated RCE in vCenter (CVE-2026-59309, CVE-2026-59310). CVSS scores up to 9.8. Immediate patching is crucial. #VMware #CyberSecurity #PatchTuesday\n\ud83d\udd17 https://cyber.netsecops.io/articles/vmware-patches-critical-vm-escape-vulnerability-cve-2026-47876-in-esxi/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-12T15:06:54.349904Z"}, {"uuid": "fee3b259-1042-4e52-9cf7-9cebd9597110", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47876", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3msvfsvfbco2w", "content": "Broadcom patches critical VMware flaws, including a VM escape in ESXi (CVE-2026-47876) and unauthenticated RCE in vCenter (CVE-2026-59309, CVE-2026-59310). CVSS scores up to 9.8. Immediate patching is crucial. #VMware #CyberSecurity #PatchTuesday\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-12T15:07:22.290399Z"}, {"uuid": "58d9c36c-95f8-4cd2-94bf-2c4bd2611bad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47686", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtjdcq7hyb2u", "content": "A vm2 sandbox escape (CVE-2026-47686, CVSS 9.9) with public PoC lets attackers hijack the host. Two more critical flaws also patched. Update to 3.11.6.\n\n#vm2 #CVE202647686 #SandboxEscape #RCE #NodeJS #InfoSec", "creation_timestamp": "2026-08-20T13:15:47.895625Z"}, {"uuid": "7dff40b6-4b8d-460e-8691-c1c9e79da6bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47229", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gnnizcejqbpge", "content": "CVE-2026-47229 - Admidio: CSRF in SSO client `enable` action toggles SAML/OIDC clients without token validation\nCVE ID : CVE-2026-47229\n \n Published : Aug. 12, 2026, 2:17 p.m. | 15\u00a0minutes ago\n \n Description : Admidio is an open-source user management solution. Prior to versio...", "creation_timestamp": "2026-08-12T15:22:54.959068Z"}, {"uuid": "71f8bc3a-17a2-4dc4-91a5-959de5fd5f94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47232", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5fxxz3gzce2tb", "content": "CVE-2026-47232 - Admidio PKCS#12 private key export action lacks CSRF protection\nCVE ID : CVE-2026-47232\n \n Published : Aug. 12, 2026, 2:17 p.m. | 15\u00a0minutes ago\n \n Description : Admidio is an open-source user management solution. Prior to version 5.0.10, the sensitive `mode=e...", "creation_timestamp": "2026-08-12T15:28:55.174752Z"}, {"uuid": "a024d2ce-b44e-470d-9e97-edcc9504a33a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47430", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnrsnt5lla2i", "content": "CVE-2026-47430 - Cordova Plugin InAppBrowser: iOS: Arbitrary Cordova callback IDs can be dispatched without validation from InAppBrowser WebViews\nCVE ID : CVE-2026-47430\n \n Published : June 8, 2026, 12:16 p.m. | 16\u00a0minutes ago\n \n Description : ## Summary\n\nThe iOS implementatio...", "creation_timestamp": "2026-06-08T13:40:34.704222Z"}, {"uuid": "7625153b-e5f8-459a-b835-138efb252be9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47231", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2tsmvj5hdjmwn", "content": "CVE-2026-47231 - Admidio has IDOR in `documents-files.php` `mode=move_save` that lets any folder-uploader exfiltrate files from private folders\nCVE ID : CVE-2026-47231\n \n Published : Aug. 12, 2026, 2:17 p.m. | 15\u00a0minutes ago\n \n Description : Admidio is an open-source user mana...", "creation_timestamp": "2026-08-12T15:34:55.263290Z"}, {"uuid": "05727f13-8034-4632-850a-fafc05aaf94d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47668", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116715316110954921", "content": "\ud83d\udcf0 CVSS 10.0 Flaws in Azure HorizonDB and DbGate Expose Cloud Environments to RCE\n\ud83d\udd25 CRITICAL ALERT: Two CVSS 10.0 vulnerabilities disclosed! \ud83d\udea8 Unauthenticated bypass in Azure HorizonDB (CVE-2026-48567) & RCE in DbGate (CVE-2026-47668) pose extreme risk to cloud environments. Patch and restrict access NOW! #CVE #RCE #CyberSecurity\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/critical-cvss-10-flaws-azure-horizondb-dbgate-expose-cloud-environments/?u\u2026", "creation_timestamp": "2026-06-08T16:00:04.796830Z"}, {"uuid": "1cb0a531-b24d-4a25-88c7-ce02a04517f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47345", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnsl3enfz62j", "content": "CVE-2026-47345 - TYPO3 HTML Sanitizer allows Cross-Site Scripting\nCVE ID : CVE-2026-47345\n \n Published : June 8, 2026, 8:17 p.m. | 17\u00a0minutes ago\n \n Description : Namespace attributes are not encoded correctly during HTML serialization. This allows bypassing the cross-site scr...", "creation_timestamp": "2026-06-08T20:57:38.157588Z"}, {"uuid": "43909b62-321a-4b2d-bd14-0afc5b1ab699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47344", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnslwat77o2j", "content": "CVE-2026-47344 - TYPO3 HTML Sanitizer allows Cross-Site Scripting\nCVE ID : CVE-2026-47344\n \n Published : June 8, 2026, 8:17 p.m. | 17\u00a0minutes ago\n \n Description : When ALLOW_INSECURE_RAW_TEXT is enabled, whitespace-variant closing tags (e.g., ) are not recognized by the saniti...", "creation_timestamp": "2026-06-08T21:13:20.200370Z"}, {"uuid": "e2e21119-18b8-49d2-8f96-0f6b698040bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47628", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/66xphxxvaferb", "content": "CVE-2026-47628 - NVIDIA Triton Inference Server Resource Exhaustion Vulnerability\nCVE ID : CVE-2026-47628\n \n Published : Aug. 18, 2026, 6:23 p.m. | 12\u00a0minutes ago\n \n Description : NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause a...", "creation_timestamp": "2026-08-18T19:02:47.924903Z"}, {"uuid": "4cefc700-dc0c-462f-96d3-6598a3982083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47230", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6e3gk3aqb777g", "content": "CVE-2026-47230 - Admidio: IDOR in documents-files.php allows cross-folder file rename and description changes by unauthorized uploaders\nCVE ID : CVE-2026-47230\n \n Published : Aug. 12, 2026, 2:17 p.m. | 15\u00a0minutes ago\n \n Description : Admidio is an open-source user management s...", "creation_timestamp": "2026-08-12T15:40:55.827301Z"}, {"uuid": "01bad604-2e12-4517-954e-7e12c5711205", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47693", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-3h6h-67x3-cv5x", "content": "", "creation_timestamp": "2026-06-08T23:04:25.000000Z"}, {"uuid": "a91b9ce7-3909-42e5-8220-3b6eb01a48f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47629", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hyvdlljjeuaxp", "content": "CVE-2026-47629 - NVIDIA Triton Inference Server Improper Input Validation Vulnerability\nCVE ID : CVE-2026-47629\n \n Published : Aug. 18, 2026, 6:24 p.m. | 12\u00a0minutes ago\n \n Description : NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could c...", "creation_timestamp": "2026-08-18T19:08:47.560916Z"}, {"uuid": "c94ffdac-4a09-4842-880b-1f823b56eadf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47326", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260602", "content": "", "creation_timestamp": "2026-06-01T18:00:00.000000Z"}, {"uuid": "f35ca9f9-1226-470b-98a0-4b193497e6ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47327", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260602", "content": "", "creation_timestamp": "2026-06-01T18:00:00.000000Z"}, {"uuid": "03b49a5a-8e1f-452c-a348-c7b0822df0c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47328", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260602", "content": "", "creation_timestamp": "2026-06-01T18:00:00.000000Z"}, {"uuid": "313ddf2d-32c4-49c9-9730-98b2b8d1ada2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47330", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260602", "content": "", "creation_timestamp": "2026-06-01T18:00:00.000000Z"}, {"uuid": "28922e32-e104-4e9c-a256-fe398d127ccd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47331", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260602", "content": "", "creation_timestamp": "2026-06-01T18:00:00.000000Z"}, {"uuid": "558a1916-b962-47ea-aae9-6adda266a167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47332", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260602", "content": "", "creation_timestamp": "2026-06-01T18:00:00.000000Z"}, {"uuid": "012cbfa0-7590-4e36-9d1c-4d770235305d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47334", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260602", "content": "", "creation_timestamp": "2026-06-01T18:00:00.000000Z"}, {"uuid": "ce57710a-0a44-46a7-87fe-a61602b74546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47335", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260602", "content": "", "creation_timestamp": "2026-06-01T18:00:00.000000Z"}, {"uuid": "1ddfc0d1-f1f0-49c5-9b7b-c4ce2569f0f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47336", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260602", "content": "", "creation_timestamp": "2026-06-01T18:00:00.000000Z"}, {"uuid": "d81cdc05-265f-4141-8f85-e789565a29bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47337", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260602", "content": "", "creation_timestamp": "2026-06-01T18:00:00.000000Z"}, {"uuid": "4426f48d-aa3e-42e9-84fc-b0ad6edf5ed5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47329", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260602", "content": "", "creation_timestamp": "2026-06-01T18:00:00.000000Z"}, {"uuid": "80dff584-c54e-400d-a64b-60f8f124da5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47252", "type": "published-proof-of-concept", "source": "https://github.com/julien040/anyquery/security/advisories/GHSA-hrj8-hjv8-mgwc", "content": "", "creation_timestamp": "2026-06-07T20:55:05.000000Z"}, {"uuid": "164183de-59db-4875-bdd8-cf4e8582abcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47333", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260602", "content": "", "creation_timestamp": "2026-06-01T18:00:00.000000Z"}, {"uuid": "54b940c2-743f-43ca-9539-2a6734a25d1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47774", "type": "seen", "source": "https://gist.github.com/lyuyun/60b1d6a8ad599cf3430761a4b380b17e", "content": "  \u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u252c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510\n  \u2502               \u4e4b\u524d\u63d0\u5230\u7684\u65b9\u6848               \u2502                                         \u5b9e\u9645\u53ef\u884c\u6027                                         \u2502\n  \u251c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u253c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524\n  \u2502 codec_type: HTTP1 (\u5355\u72ec\u4f7f\u7528)               \u2502 \u6709\u6548\u963b\u6b62\u6f0f\u6d1e\u5229\u7528\uff0c\u4f46\u4f1a\u7834\u574f h2 \u5ba2\u6237\u7aef\u8fde\u63a5                                                   \u2502\n  \u251c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u253c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524\n  \u2502 max_request_headers_kb \u9650\u5236                \u2502 \u5bf9\u6b64 CVE \u65e0\u6548 \u2014 Cookie \u5b57\u8282\u5728\u5927\u5c0f\u6821\u9a8c\u540e\u624d\u62fc\u88c5\uff0c\u7ed5\u8fc7\u8be5\u68c0\u67e5                                  \u2502\n  \u251c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u253c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524\n  \u2502 ALPN MERGE \u79fb\u9664 h2                         \u2502 \u4e0d\u53ef\u884c \u2014 proto repeated \u5b57\u6bb5 MERGE \u662f\u8ffd\u52a0\uff0c\u7ed3\u679c\u4e3a [\"h2\",\"http/1.1\",\"http/1.1\"]             \u2502\n  \u251c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u253c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524\n  \u2502 Overload Manager via BOOTSTRAP EnvoyFilter \u2502 \u5bf9 ingressgateway \u4e0d\u751f\u6548 \u2014 \u5df2\u77e5 issue #40903 (https://github.com/istio/istio/issues/40903) \u2502\n  \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2534\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518\n\n  ---\n  \u5b9e\u9645\u53ef\u5b9e\u65bd\u7684\u65b9\u6848\uff08\u5df2\u9a8c\u8bc1\uff09\n\n  \u65b9\u6848 A\uff1acodec_type HTTP1\uff08\u53ef\u7528\uff0c\u9700\u7406\u89e3\u526f\u4f5c\u7528\uff09\n\n  \u673a\u5236\uff1acodec_type: HTTP1 \u4f7f HCM \u5b8c\u5168\u5ffd\u7565 ALPN \u534f\u5546\u7ed3\u679c\uff0c\u5f3a\u5236\u7528 HTTP/1.1 \u89e3\u6790\u5668\u5904\u7406\u8fde\u63a5\u3002\u5ba2\u6237\u7aef\u82e5\u7ecf ALPN \u534f\u5546\u4e86 h2\uff0c\u53d1\u6765 HTTP/2 preface\uff08PRI *\n  HTTP/2.0\\r\\n\\r\\nSM\\r\\n\\r\\n\uff09\uff0cHTTP/1.1 \u89e3\u6790\u5668\u65e0\u6cd5\u8bc6\u522b \u2192 \u8fd4\u56de 400 http1.codec_error\uff0c\u8fde\u63a5\u5173\u95ed\u3002\n\n  \u7ed3\u679c\uff1a\u6f0f\u6d1e\u5229\u7528\u8def\u5f84\u88ab\u5207\u65ad\uff08HTTP/2 \u5e27\u4ece\u672a\u88ab\u5904\u7406\uff09\uff0c\u4f46 h2 \u5ba2\u6237\u7aef\u4f1a\u906d\u9047 400 \u9519\u8bef\u800c\u975e\u4f18\u96c5\u964d\u7ea7\u3002\n\n  apiVersion: networking.istio.io/v1alpha3\n  kind: EnvoyFilter\n  metadata:\n    name: force-http1-codec\n    namespace: istio-system\n  spec:\n    workloadSelector:\n      labels:\n        istio: ingressgateway\n    configPatches:\n    - applyTo: NETWORK_FILTER\n      match:\n        context: GATEWAY\n        listener:\n          filterChain:\n            filter:\n              name: \"envoy.filters.network.http_connection_manager\"\n      patch:\n        operation: MERGE\n        value:\n          typed_config:\n            \"@type\": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager\n            codec_type: HTTP1\n\n  \u9002\u7528\u6761\u4ef6\uff1a\u65e0 gRPC \u670d\u52a1\uff0c\u5ba2\u6237\u7aef\u53ef\u63a5\u53d7\u964d\u7ea7\u4e3a HTTP/1.1\u3002\n\n  ---\n  \u65b9\u6848 B\uff1a\u5b8c\u6574\u7981\u7528 HTTP/2\uff08codec + ALPN \u53cc\u5c42\uff0c\u9700 IstioOperator\uff09\n\n  \u7531\u4e8e EnvoyFilter MERGE \u65e0\u6cd5\u79fb\u9664 ALPN \u4e2d\u7684 h2\uff0c\u9700\u901a\u8fc7 IstioOperator k8s.overlays \u76f4\u63a5\u5411 ingressgateway Deployment \u6ce8\u5165\u73af\u5883\u53d8\u91cf\u6765\u8986\u76d6 bootstrap\uff0c\u4ece\u6839\u6e90\u4e0a\u63a7\u5236\n  ALPN\u3002\n\n  \u6b65\u9aa4 1\uff1a\u521b\u5efa\u81ea\u5b9a\u4e49 bootstrap ConfigMap\n\n  apiVersion: v1\n  kind: ConfigMap\n  metadata:\n    name: gw-custom-bootstrap\n    namespace: istio-system\n  data:\n    custom_bootstrap.yaml: |\n      # \u8986\u76d6 Envoy \u4e0b\u6e38 TLS ALPN\uff0c\u4ec5\u4fdd\u7559 http/1.1\n      # \u6b64\u6587\u4ef6\u901a\u8fc7 --config-yaml \u4e0e\u9ed8\u8ba4 bootstrap \u5408\u5e76\n      # \u6ce8\u610f\uff1arepeated \u5b57\u6bb5\u5728\u5408\u5e76\u65f6\u8ffd\u52a0\uff0csingular \u5b57\u6bb5\u66ff\u6362\n      # ALPN \u901a\u8fc7 listener \u5c42\u8986\u76d6\uff0c\u6b64\u5904\u7528 overload_manager \u4f5c\u4e3a\u9644\u52a0\u9632\u62a4\n      overload_manager:\n        refresh_interval: 0.25s\n        buffer_factory_config:\n          minimum_account_to_track_power_of_two: 20\n        resource_monitors:\n        - name: \"envoy.resource_monitors.fixed_heap\"\n          typed_config:\n            \"@type\": type.googleapis.com/envoy.extensions.resource_monitors.fixed_heap.v3.FixedHeapConfig\n            max_heap_size_bytes: 1610612736  # \u8bbe\u4e3a\u5185\u5b58 limit \u7684 ~90%\uff0c\u5982 1.5GB\n        actions:\n        - name: \"envoy.overload_actions.reset_high_memory_stream\"\n          triggers:\n          - name: \"envoy.resource_monitors.fixed_heap\"\n            scaled:\n              scaling_threshold: 0.85\n              saturation_threshold: 0.95\n        - name: \"envoy.overload_actions.stop_accepting_requests\"\n          triggers:\n          - name: \"envoy.resource_monitors.fixed_heap\"\n            threshold:\n              value: 0.98\n\n  \u6b65\u9aa4 2\uff1a\u901a\u8fc7 IstioOperator overlay \u6ce8\u5165\uff08\u8fd9\u662f\u8ba9 ingressgateway \u63a5\u53d7\u81ea\u5b9a\u4e49 bootstrap \u7684\u552f\u4e00\u5df2\u9a8c\u8bc1\u65b9\u5f0f\uff09\n\n  apiVersion: install.istio.io/v1alpha1\n  kind: IstioOperator\n  spec:\n    components:\n      ingressGateways:\n      - name: istio-ingressgateway\n        enabled: true\n        k8s:\n          overlays:\n          - kind: Deployment\n            name: istio-ingressgateway\n            patches:\n            - path: spec.template.spec.containers.[name:istio-proxy].env[-1]\n              value:\n                name: ISTIO_BOOTSTRAP_OVERRIDE\n                value: /etc/istio/custom-bootstrap/custom_bootstrap.yaml\n            - path: spec.template.spec.containers.[name:istio-proxy].volumeMounts[-1]\n              value:\n                mountPath: /etc/istio/custom-bootstrap\n                name: custom-bootstrap-volume\n                readOnly: true\n            - path: spec.template.spec.volumes[-1]\n              value:\n                name: custom-bootstrap-volume\n                configMap:\n                  name: gw-custom-bootstrap\n                  defaultMode: 420\n\n  \u6b65\u9aa4 3\uff1a\u540c\u65f6\u53e0\u52a0\u65b9\u6848 A \u7684 codec_type: HTTP1 EnvoyFilter\n\n  \u4e24\u8005\u7ec4\u5408\u6548\u679c\uff1a\n  - codec_type: HTTP1 \u2192 \u963b\u65ad HTTP/2 \u5e27\u5904\u7406\uff08\u9632\u6b62\u6f0f\u6d1e\u5229\u7528\uff09\n  - overload_manager \u2192 \u5185\u5b58\u538b\u529b\u8d85 85% \u65f6\u4e3b\u52a8 reset \u9ad8\u5185\u5b58\u6d41\uff08\u9650\u5236\u7206\u70b8\u534a\u5f84\uff09\n  - stop_accepting_requests \u2192 \u5185\u5b58\u538b\u529b\u8d85 98% \u65f6\u62d2\u7edd\u65b0\u8bf7\u6c42\uff08\u4fdd\u62a4\u8fdb\u7a0b\u4e0d OOM \u5d29\u6e83\uff09\n\n  ---\n  \u65b9\u6848 C\uff1a\u5728 Istio \u524d\u7f6e\u5c42\u7ec8\u6b62 HTTP/2\uff08\u5bf9\u670d\u52a1\u65e0\u4fb5\u5165\uff09\n\n  \u82e5\u6709 Nginx/\u4e91 LB \u4f4d\u4e8e Istio \u524d\uff0c\u5728\u8be5\u5c42\u5f3a\u5236 HTTP/1.1 \u4e0e\u540e\u7aef\u901a\u4fe1\uff1a\n\n  # Nginx \u2192 Istio ingressgateway \u6bb5\u5f3a\u5236 HTTP/1.1\n  upstream istio_gw {\n      server istio-ingressgateway:443;\n      keepalive 32;\n  }\n\n  server {\n      listen 443 ssl;\n      # \u4e0d\u914d\u7f6e http2\uff0c\u5373\u53ea\u534f\u5546 http/1.1\n      ssl_protocols TLSv1.2 TLSv1.3;\n      ssl_ciphers HIGH:!aNULL:!MD5;\n\n      location / {\n          proxy_pass https://istio_gw;\n          proxy_http_version 1.1;       # \u5f3a\u5236 HTTP/1.1\n          proxy_set_header Connection \"\";\n      }\n  }\n\n  \u9002\u7528\u6761\u4ef6\uff1a\u67b6\u6784\u4e0a\u6709\u72ec\u7acb\u7684\u5165\u53e3\u5c42\uff0cIstio \u4e0d\u76f4\u63a5\u66b4\u9732\u7ed9\u5916\u90e8\u3002\n\n  ---\n  \u6700\u7ec8\u51b3\u7b56\u6811\n\n  \u662f\u5426\u6709 gRPC \u670d\u52a1\uff1f\n  \u251c\u2500 \u5426 \u2500\u2500\u2192 \u65b9\u6848 A\uff08codec_type: HTTP1\uff09\n  \u2502          + \u65b9\u6848 B\uff08overload_manager \u4fdd\u62a4\uff09\n  \u2502          \u2713 \u53ef\u7acb\u5373\u7f13\u89e3 CVE\uff0c\u4ee3\u4ef7\u662f h2 \u5ba2\u6237\u7aef 400 \u964d\u7ea7\n  \u2502\n  \u2514\u2500 \u662f \u2500\u2500\u2192 \u662f\u5426\u6709 Istio \u524d\u7f6e\u7684\u72ec\u7acb\u5165\u53e3\u5c42\uff1f\n             \u251c\u2500 \u662f \u2500\u2500\u2192 \u65b9\u6848 C\uff08\u524d\u7f6e\u5c42\u62e6\u622a\uff09\n             \u2502          gRPC \u8d70\u72ec\u7acb\u7aef\u53e3/Gateway \u4e0d\u53d7\u5f71\u54cd\n             \u2502\n             \u2514\u2500 \u5426 \u2500\u2500\u2192 \u65e0\u5b8c\u6574\u975e\u5347\u7ea7\u7f13\u89e3\u65b9\u6848\n                        \u5efa\u8bae\uff1a\u5c3d\u5feb\u5347\u7ea7\u81f3\u4fee\u590d\u7248\u672c\n                        \u4e34\u65f6\uff1a\u65b9\u6848 B\uff08overload_manager\uff09\u9650\u5236\u7206\u70b8\u534a\u5f84\n\n  ---\n  Sources:\n  - GHSA-22m2-hvr2-xqc8 \u2014 Envoy HTTP/2 memory exhaustion advisory (https://github.com/envoyproxy/envoy/security/advisories/GHSA-22m2-hvr2-xqc8)\n  - Configuring Envoy as an edge proxy through Istio (Signicat, Nov 2024) (https://www.signicat.com/blog/configuring-envoy-as-an-edge-proxy-through-istio)\n  - BOOTSTRAP EnvoyFilter not applied to ingressgateway \u00b7 issue #40903 (https://github.com/istio/istio/issues/40903)\n  - Support configuring ALPN on Gateway listener \u00b7 issue #44729 (https://github.com/istio/istio/issues/44729)\n  - Codex Discovered a Hidden HTTP/2 Bomb (why max_request_headers_kb fails) (https://blog.calif.io/p/codex-discovered-a-hidden-http2-bomb)\n  - Envoy Overload Manager documentation (https://www.envoyproxy.io/docs/envoy/latest/configuration/operations/overload_manager/overload_manager)\n", "creation_timestamp": "2026-06-09T02:27:39.000000Z"}, {"uuid": "01e2e8be-cd35-4dc5-a922-544b8d7f649a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47630", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/65wp6hpbjzwaf", "content": "CVE-2026-47630 - NVIDIA Triton Inference Server Path Traversal Vulnerability\nCVE ID : CVE-2026-47630\n \n Published : Aug. 18, 2026, 6:24 p.m. | 12\u00a0minutes ago\n \n Description : NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an abs...", "creation_timestamp": "2026-08-18T19:10:47.654187Z"}, {"uuid": "f3249b41-1c72-4d85-993e-73f55d463310", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47629", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtez2j7dko2u", "content": "\ud83d\udfe0 CVE-2026-47629 - High (7.5)\n\nNVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47629/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-18T20:01:36.129237Z"}, {"uuid": "ebe817be-4565-4655-8e97-6081715d3406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47428", "type": "seen", "source": "https://bsky.app/profile/whatsnew.fyi/post/3mtjg2f7rwx2t", "content": "Storybook v10.5.10\n\nBump Vitest to 4.1.6 (CVE-2026-47428)", "creation_timestamp": "2026-08-20T14:04:49.300875Z"}, {"uuid": "cbcb5e68-eed9-4c3a-a1e9-c0092a3ad9f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47627", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtez2qasbz27", "content": "\ud83d\udd34 CVE-2026-47627 - Critical (9.8)\n\nNVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause p...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47627/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-18T20:01:43.314937Z"}, {"uuid": "74fc86f5-82b5-416e-ae43-7af3ff2eeb5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47132", "type": "published-proof-of-concept", "source": "https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-6pvm-2vjj-rx4w", "content": "", "creation_timestamp": "2026-08-12T16:35:05.516937Z"}, {"uuid": "1f04217c-1445-4e48-834c-c2e7dbdb0a9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47686", "type": "seen", "source": "https://bsky.app/profile/yetikamp.bsky.social/post/3mtez5areo52r", "content": "CVE-2026-47686: vm2 sandbox escape via unsanitized SuppressedError. Node.js devs, your \"secure\" isolation is just a suggestion. Patch to 3.11.6 immediately.", "creation_timestamp": "2026-08-18T20:03:06.944016Z"}, {"uuid": "d2cfed62-e011-4cec-9e3f-e68b409045ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47627", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtezje4fr42b", "content": "\ud83d\udea8 CVE-2026-47627 \u2014 CVSS 9.8 CRITICAL\n\nNVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traver...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-47627\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T20:09:53.135138Z"}, {"uuid": "fe18d081-bda8-45cd-8d8b-3bfcacf3cdc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47774", "type": "seen", "source": "https://bsky.app/profile/mfahlandt.bsky.social/post/3mntqtexzt72o", "content": "\ud83d\udee1\ufe0f Cloud Native Security Updates (Week 24, 2026).\nEnvoy v1.38.1+ mitigates CVE-2026-47774 (HTTP/2 stream header size).\ncontainerd v2.1.8 fixes CVE-2026-46680 & `host.containerd.io` mounts.\nLonghorn v1.12.0: V2 Data Engine reaches GA status.\nFull breakdown:\n\nhttps://lwcn.dev/newsletter/2026-week-24/", "creation_timestamp": "2026-06-09T08:13:12.401185Z"}, {"uuid": "e931122e-83b0-464c-ac18-ee1f353674e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47430", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-apache-http-server", "content": "", "creation_timestamp": "2026-06-09T00:51:01.000000Z"}, {"uuid": "3e8a926c-c5a9-41bc-8662-257bb1715f72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://t.me/pphm_HackerNews/1608", "content": "\ud83d\udd34 Squidbleed: 29-Year-Old Squid Bug Leaks User Credentials\n\nSquidbleed is a 29-year-old Squid Proxy flaw that can leak credentials, tokens, and other users\u2019 HTTP data through a memory overread.\n\nResearchers at Calif.io have disclosed CVE-2026-47729, a memory leak vulnerability in Squid Proxy that was introduced in 1997 and has remained undetected through nearly three decades of releases, audits, and rewrites. \n\nThey named it Squidbleed because it works like Heartbleed: it causes the proxy to read past the end of a memory buffer and hand the contents to whoever asked.\n\n\u201cThe bug occurs when no filename is provided after the modification timestamp.\u201d reads the report published by the researchers.", "creation_timestamp": "2026-08-21T23:00:11.531967Z"}, {"uuid": "ac10d3fe-cbff-4f9e-ac79-f383e671ed46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://bsky.app/profile/j4vv4d.com/post/3mt2x4tloil2n", "content": "SCCM sits in your infrastructure like a master key. One HTTP POST from literally anyone in your domain and an attacker owns the whole thing. Patch CVE-2026-47301 now. ...\n\nhttps://api.cyfluencer.com/s/potential-for-remote-code-execution-in-microsoft-sccm-via-newly-discovered-exploit-chain-28995", "creation_timestamp": "2026-08-14T20:00:29.063790Z"}, {"uuid": "e7e2d108-a2cb-4a95-a79d-9dceb705db20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47895", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnu7hwjqqy25", "content": "\ud83d\udd17 CVE : CVE-2026-47895", "creation_timestamp": "2026-06-09T12:35:15.564536Z"}, {"uuid": "84615d54-3f3b-4997-9fa4-60eb9850b96b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47301", "type": "seen", "source": "https://bsky.app/profile/mybestia.bsky.social/post/3mtbogjb7rl2t", "content": "\ud83d\udd25 CVE-2026-47301: De elevaci\u00f3n de privilegios SCCM a SYSTEM\n\nhttps://mybestia.com/blog/cve-2026-47301-de-elevacion-de-privilegios-sccm-a-system\n\n\ud83d\udd14 https://www.youtube.com/@fjqg?sub_confirmation=1 \ud83e\udd16 IA", "creation_timestamp": "2026-08-17T12:13:27.367199Z"}, {"uuid": "987eedb5-451c-4d99-9141-652ec28b2e87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47901", "type": "seen", "source": "https://cert.pl/en/posts/2026/06/CVE-2026-9279", "content": "", "creation_timestamp": "2026-06-09T06:55:00.000000Z"}, {"uuid": "6ad7a246-381c-4d59-b6e4-6c45bbb65db0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47899", "type": "seen", "source": "https://cert.pl/en/posts/2026/06/CVE-2026-9279", "content": "", "creation_timestamp": "2026-06-09T06:55:00.000000Z"}, {"uuid": "9414ca2f-ae28-42cc-9c3e-fa3cd23c8780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47900", "type": "seen", "source": "https://cert.pl/en/posts/2026/06/CVE-2026-9279", "content": "", "creation_timestamp": "2026-06-09T06:55:00.000000Z"}, {"uuid": "ac77cb9a-6735-43ba-9d41-6a3be801799a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47289", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0181", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot diverse categorie\u00ebn schade, zoals omschreven in onderstaande tabellen.\n\nTussen deze kwetsbaarheden zitten een zestal zeer ernstige, welke door Microsoft zijn ingeschaald met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden bevinden zich in diverse componenten van Windows die bereikbaar en benaderbaar zijn vanaf netwerkverbindingen, zoals http.sys, DHCP, de Kernel en TCP/IP. Door de externe bereikbaarheid en de mogelijkheden tot uitvoer van willekeurige code, is het risico op grootschalig misbruik op korte termijn aanwezig. Op dit moment wordt (nog) geen actief misbruik waargenomen en is (nog) geen publieke Proof-of-Concept (PoC) of exploit bekend, maar het NCSC verwacht deze wel op korte termijn en adviseert daarom deze updates met spoed in te zetten.\n\n```\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42904 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42915 | 5.70 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45655 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-45658 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50507 | 6.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Mark of the Web (MOTW): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45595 | 5.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44812 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42969 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42971 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42970 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42973 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42978 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42977 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42979 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42991 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41108 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45640 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34335 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45601 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45598 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45596 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45638 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45603 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42911 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nFunction Discovery Service (fdwsd.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42836 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-10263 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45657 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48583 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45653 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42984 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45588 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48568 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48570 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48573 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48575 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48576 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48578 | 7.90 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45654 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47289 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47653 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47654 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-48563 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42909 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42913 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42992 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44799 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44801 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42985 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-42993 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft UxTheme Library (uxtheme.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45606 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45600 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45608 | 6.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45599 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-45635 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45605 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows UEFI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45656 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-8863  | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Hotpatch Monitoring Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42910 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45642 | 3.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45639 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42908 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42989 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Collaborative Translation Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45586 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47288 | 7.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42903 | 6.50 | Denial-of-Service                   | \n| CVE-2026-42914 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44810 | 8.40 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45636 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40409 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40404 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42986 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45607 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-47652 | 8.20 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NT OS Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42980 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42916 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44809 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42837 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nUI Automation Manager (uiamanager.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45597 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47291 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Kinect: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41092 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SDK: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45593 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48574 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Performance Monitor: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42981 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42974 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Identity (AppID) Subsystem: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45594 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45604 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Administrator Protection: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42829 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRole: Windows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45641 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-42972 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48565 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45634 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45602 | 9.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Internet (wininet.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45592 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42987 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49160 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42912 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42968 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Controller (NC) Host Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44805 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48566 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45637 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42905 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44811 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42983 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44802 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44814 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44813 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Boot Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47656 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45487 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47648 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42906 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42907 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45648 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-06-09T15:44:28.000000Z"}, {"uuid": "b7be6375-7f87-4276-aafd-9624aa1af20b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47653", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0181", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot diverse categorie\u00ebn schade, zoals omschreven in onderstaande tabellen.\n\nTussen deze kwetsbaarheden zitten een zestal zeer ernstige, welke door Microsoft zijn ingeschaald met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden bevinden zich in diverse componenten van Windows die bereikbaar en benaderbaar zijn vanaf netwerkverbindingen, zoals http.sys, DHCP, de Kernel en TCP/IP. Door de externe bereikbaarheid en de mogelijkheden tot uitvoer van willekeurige code, is het risico op grootschalig misbruik op korte termijn aanwezig. Op dit moment wordt (nog) geen actief misbruik waargenomen en is (nog) geen publieke Proof-of-Concept (PoC) of exploit bekend, maar het NCSC verwacht deze wel op korte termijn en adviseert daarom deze updates met spoed in te zetten.\n\n```\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42904 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42915 | 5.70 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45655 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-45658 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50507 | 6.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Mark of the Web (MOTW): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45595 | 5.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44812 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42969 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42971 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42970 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42973 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42978 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42977 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42979 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42991 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41108 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45640 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34335 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45601 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45598 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45596 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45638 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45603 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42911 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nFunction Discovery Service (fdwsd.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42836 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-10263 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45657 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48583 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45653 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42984 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45588 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48568 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48570 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48573 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48575 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48576 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48578 | 7.90 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45654 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47289 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47653 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47654 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-48563 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42909 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42913 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42992 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44799 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44801 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42985 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-42993 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft UxTheme Library (uxtheme.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45606 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45600 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45608 | 6.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45599 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-45635 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45605 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows UEFI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45656 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-8863  | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Hotpatch Monitoring Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42910 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45642 | 3.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45639 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42908 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42989 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Collaborative Translation Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45586 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47288 | 7.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42903 | 6.50 | Denial-of-Service                   | \n| CVE-2026-42914 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44810 | 8.40 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45636 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40409 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40404 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42986 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45607 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-47652 | 8.20 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NT OS Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42980 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42916 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44809 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42837 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nUI Automation Manager (uiamanager.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45597 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47291 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Kinect: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41092 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SDK: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45593 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48574 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Performance Monitor: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42981 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42974 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Identity (AppID) Subsystem: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45594 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45604 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Administrator Protection: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42829 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRole: Windows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45641 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-42972 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48565 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45634 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45602 | 9.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Internet (wininet.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45592 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42987 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49160 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42912 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42968 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Controller (NC) Host Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44805 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48566 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45637 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42905 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44811 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42983 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44802 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44814 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44813 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Boot Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47656 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45487 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47648 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42906 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42907 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45648 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-06-09T15:44:28.000000Z"}, {"uuid": "3fccfcee-ea95-4c29-a5a2-ed48883f56d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47654", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0181", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot diverse categorie\u00ebn schade, zoals omschreven in onderstaande tabellen.\n\nTussen deze kwetsbaarheden zitten een zestal zeer ernstige, welke door Microsoft zijn ingeschaald met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden bevinden zich in diverse componenten van Windows die bereikbaar en benaderbaar zijn vanaf netwerkverbindingen, zoals http.sys, DHCP, de Kernel en TCP/IP. Door de externe bereikbaarheid en de mogelijkheden tot uitvoer van willekeurige code, is het risico op grootschalig misbruik op korte termijn aanwezig. Op dit moment wordt (nog) geen actief misbruik waargenomen en is (nog) geen publieke Proof-of-Concept (PoC) of exploit bekend, maar het NCSC verwacht deze wel op korte termijn en adviseert daarom deze updates met spoed in te zetten.\n\n```\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42904 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42915 | 5.70 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45655 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-45658 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50507 | 6.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Mark of the Web (MOTW): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45595 | 5.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44812 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42969 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42971 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42970 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42973 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42978 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42977 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42979 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42991 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41108 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45640 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34335 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45601 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45598 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45596 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45638 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45603 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42911 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nFunction Discovery Service (fdwsd.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42836 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-10263 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45657 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48583 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45653 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42984 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45588 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48568 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48570 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48573 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48575 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48576 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48578 | 7.90 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45654 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47289 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47653 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47654 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-48563 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42909 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42913 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42992 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44799 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44801 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42985 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-42993 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft UxTheme Library (uxtheme.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45606 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45600 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45608 | 6.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45599 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-45635 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45605 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows UEFI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45656 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-8863  | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Hotpatch Monitoring Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42910 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45642 | 3.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45639 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42908 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42989 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Collaborative Translation Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45586 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47288 | 7.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42903 | 6.50 | Denial-of-Service                   | \n| CVE-2026-42914 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44810 | 8.40 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45636 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40409 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40404 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42986 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45607 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-47652 | 8.20 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NT OS Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42980 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42916 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44809 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42837 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nUI Automation Manager (uiamanager.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45597 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47291 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Kinect: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41092 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SDK: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45593 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48574 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Performance Monitor: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42981 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42974 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Identity (AppID) Subsystem: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45594 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45604 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Administrator Protection: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42829 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRole: Windows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45641 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-42972 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48565 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45634 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45602 | 9.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Internet (wininet.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45592 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42987 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49160 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42912 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42968 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Controller (NC) Host Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44805 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48566 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45637 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42905 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44811 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42983 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44802 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44814 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44813 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Boot Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47656 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45487 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47648 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42906 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42907 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45648 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-06-09T15:44:28.000000Z"}, {"uuid": "de8833d4-9ee7-4471-a5b1-f84bfdd388d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47288", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0181", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot diverse categorie\u00ebn schade, zoals omschreven in onderstaande tabellen.\n\nTussen deze kwetsbaarheden zitten een zestal zeer ernstige, welke door Microsoft zijn ingeschaald met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden bevinden zich in diverse componenten van Windows die bereikbaar en benaderbaar zijn vanaf netwerkverbindingen, zoals http.sys, DHCP, de Kernel en TCP/IP. Door de externe bereikbaarheid en de mogelijkheden tot uitvoer van willekeurige code, is het risico op grootschalig misbruik op korte termijn aanwezig. Op dit moment wordt (nog) geen actief misbruik waargenomen en is (nog) geen publieke Proof-of-Concept (PoC) of exploit bekend, maar het NCSC verwacht deze wel op korte termijn en adviseert daarom deze updates met spoed in te zetten.\n\n```\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42904 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42915 | 5.70 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45655 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-45658 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50507 | 6.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Mark of the Web (MOTW): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45595 | 5.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44812 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42969 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42971 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42970 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42973 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42978 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42977 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42979 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42991 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41108 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45640 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34335 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45601 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45598 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45596 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45638 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45603 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42911 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nFunction Discovery Service (fdwsd.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42836 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-10263 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45657 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48583 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45653 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42984 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45588 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48568 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48570 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48573 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48575 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48576 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48578 | 7.90 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45654 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47289 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47653 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47654 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-48563 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42909 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42913 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42992 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44799 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44801 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42985 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-42993 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft UxTheme Library (uxtheme.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45606 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45600 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45608 | 6.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45599 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-45635 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45605 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows UEFI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45656 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-8863  | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Hotpatch Monitoring Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42910 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45642 | 3.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45639 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42908 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42989 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Collaborative Translation Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45586 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47288 | 7.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42903 | 6.50 | Denial-of-Service                   | \n| CVE-2026-42914 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44810 | 8.40 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45636 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40409 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40404 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42986 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45607 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-47652 | 8.20 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NT OS Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42980 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42916 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44809 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42837 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nUI Automation Manager (uiamanager.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45597 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47291 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Kinect: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41092 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SDK: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45593 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48574 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Performance Monitor: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42981 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42974 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Identity (AppID) Subsystem: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45594 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45604 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Administrator Protection: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42829 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRole: Windows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45641 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-42972 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48565 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45634 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45602 | 9.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Internet (wininet.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45592 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42987 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49160 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42912 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42968 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Controller (NC) Host Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44805 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48566 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45637 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42905 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44811 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42983 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44802 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44814 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44813 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Boot Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47656 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45487 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47648 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42906 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42907 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45648 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-06-09T15:44:28.000000Z"}, {"uuid": "1336d4b5-1bfc-42c8-a5ec-7e50fef3606d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47652", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0181", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot diverse categorie\u00ebn schade, zoals omschreven in onderstaande tabellen.\n\nTussen deze kwetsbaarheden zitten een zestal zeer ernstige, welke door Microsoft zijn ingeschaald met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden bevinden zich in diverse componenten van Windows die bereikbaar en benaderbaar zijn vanaf netwerkverbindingen, zoals http.sys, DHCP, de Kernel en TCP/IP. Door de externe bereikbaarheid en de mogelijkheden tot uitvoer van willekeurige code, is het risico op grootschalig misbruik op korte termijn aanwezig. Op dit moment wordt (nog) geen actief misbruik waargenomen en is (nog) geen publieke Proof-of-Concept (PoC) of exploit bekend, maar het NCSC verwacht deze wel op korte termijn en adviseert daarom deze updates met spoed in te zetten.\n\n```\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42904 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42915 | 5.70 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45655 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-45658 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50507 | 6.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Mark of the Web (MOTW): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45595 | 5.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44812 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42969 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42971 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42970 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42973 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42978 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42977 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42979 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42991 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41108 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45640 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34335 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45601 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45598 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45596 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45638 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45603 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42911 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nFunction Discovery Service (fdwsd.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42836 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-10263 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45657 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48583 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45653 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42984 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45588 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48568 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48570 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48573 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48575 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48576 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48578 | 7.90 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45654 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47289 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47653 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47654 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-48563 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42909 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42913 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42992 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44799 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44801 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42985 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-42993 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft UxTheme Library (uxtheme.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45606 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45600 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45608 | 6.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45599 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-45635 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45605 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows UEFI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45656 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-8863  | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Hotpatch Monitoring Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42910 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45642 | 3.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45639 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42908 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42989 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Collaborative Translation Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45586 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47288 | 7.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42903 | 6.50 | Denial-of-Service                   | \n| CVE-2026-42914 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44810 | 8.40 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45636 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40409 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40404 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42986 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45607 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-47652 | 8.20 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NT OS Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42980 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42916 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44809 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42837 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nUI Automation Manager (uiamanager.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45597 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47291 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Kinect: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41092 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SDK: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45593 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48574 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Performance Monitor: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42981 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42974 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Identity (AppID) Subsystem: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45594 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45604 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Administrator Protection: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42829 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRole: Windows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45641 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-42972 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48565 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45634 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45602 | 9.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Internet (wininet.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45592 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42987 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49160 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42912 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42968 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Controller (NC) Host Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44805 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48566 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45637 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42905 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44811 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42983 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44802 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44814 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44813 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Boot Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47656 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45487 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47648 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42906 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42907 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45648 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-06-09T15:44:28.000000Z"}, {"uuid": "ddcf4234-d2df-47ab-a077-6efaaeddf06f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47291", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0181", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot diverse categorie\u00ebn schade, zoals omschreven in onderstaande tabellen.\n\nTussen deze kwetsbaarheden zitten een zestal zeer ernstige, welke door Microsoft zijn ingeschaald met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden bevinden zich in diverse componenten van Windows die bereikbaar en benaderbaar zijn vanaf netwerkverbindingen, zoals http.sys, DHCP, de Kernel en TCP/IP. Door de externe bereikbaarheid en de mogelijkheden tot uitvoer van willekeurige code, is het risico op grootschalig misbruik op korte termijn aanwezig. Op dit moment wordt (nog) geen actief misbruik waargenomen en is (nog) geen publieke Proof-of-Concept (PoC) of exploit bekend, maar het NCSC verwacht deze wel op korte termijn en adviseert daarom deze updates met spoed in te zetten.\n\n```\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42904 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42915 | 5.70 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45655 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-45658 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50507 | 6.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Mark of the Web (MOTW): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45595 | 5.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44812 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42969 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42971 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42970 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42973 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42978 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42977 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42979 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42991 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41108 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45640 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34335 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45601 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45598 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45596 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45638 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45603 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42911 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nFunction Discovery Service (fdwsd.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42836 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-10263 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45657 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48583 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45653 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42984 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45588 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48568 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48570 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48573 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48575 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48576 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48578 | 7.90 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45654 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47289 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47653 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47654 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-48563 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42909 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42913 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42992 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44799 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44801 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42985 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-42993 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft UxTheme Library (uxtheme.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45606 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45600 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45608 | 6.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45599 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-45635 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45605 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows UEFI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45656 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-8863  | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Hotpatch Monitoring Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42910 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45642 | 3.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45639 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42908 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42989 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Collaborative Translation Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45586 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47288 | 7.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42903 | 6.50 | Denial-of-Service                   | \n| CVE-2026-42914 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44810 | 8.40 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45636 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40409 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40404 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42986 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45607 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-47652 | 8.20 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NT OS Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42980 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42916 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44809 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42837 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nUI Automation Manager (uiamanager.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45597 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47291 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Kinect: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41092 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SDK: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45593 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48574 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Performance Monitor: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42981 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42974 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Identity (AppID) Subsystem: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45594 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45604 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Administrator Protection: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42829 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRole: Windows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45641 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-42972 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48565 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45634 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45602 | 9.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Internet (wininet.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45592 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42987 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49160 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42912 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42968 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Controller (NC) Host Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44805 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48566 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45637 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42905 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44811 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42983 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44802 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44814 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44813 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Boot Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47656 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45487 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47648 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42906 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42907 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45648 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-06-09T15:44:28.000000Z"}, {"uuid": "86a7d057-3878-4e6b-8864-1e97cda0bb09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47287", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0184", "content": "Microsoft heeft kwetsbaarheden verholpen in Developer Tools. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals beschreven in de onderstaande tabellen.\n\nMet uitzondering van de kwetsbaarheid in .NET core, waarvoor geen voorafgaande authenticatie of gebruikersinteractie nodig is om een Denial-of-Service te veroorzaken, moet voor succesvol misbruik de kwaadwillende lokaal toegang hebben tot het kwetsbare systeem, of het slachtoffer misleiden een malafide broncodebestand te openen en uitvoeren.\n\n```\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47287 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-47292 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40376 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-47281 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-47284 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-48569 | 7.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45482 | 8.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft Live Share Canvas SDK: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45644 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nASP.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45591 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45490 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45491 | 6.20 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-06-09T16:23:58.000000Z"}, {"uuid": "8a305c32-c23e-4c06-9890-c0e1defcc773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47292", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0184", "content": "Microsoft heeft kwetsbaarheden verholpen in Developer Tools. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals beschreven in de onderstaande tabellen.\n\nMet uitzondering van de kwetsbaarheid in .NET core, waarvoor geen voorafgaande authenticatie of gebruikersinteractie nodig is om een Denial-of-Service te veroorzaken, moet voor succesvol misbruik de kwaadwillende lokaal toegang hebben tot het kwetsbare systeem, of het slachtoffer misleiden een malafide broncodebestand te openen en uitvoeren.\n\n```\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47287 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-47292 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40376 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-47281 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-47284 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-48569 | 7.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45482 | 8.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft Live Share Canvas SDK: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45644 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nASP.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45591 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45490 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45491 | 6.20 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-06-09T16:23:58.000000Z"}, {"uuid": "75d7be1a-8c1b-46dd-b4dd-52abc61591dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47656", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0181", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot diverse categorie\u00ebn schade, zoals omschreven in onderstaande tabellen.\n\nTussen deze kwetsbaarheden zitten een zestal zeer ernstige, welke door Microsoft zijn ingeschaald met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden bevinden zich in diverse componenten van Windows die bereikbaar en benaderbaar zijn vanaf netwerkverbindingen, zoals http.sys, DHCP, de Kernel en TCP/IP. Door de externe bereikbaarheid en de mogelijkheden tot uitvoer van willekeurige code, is het risico op grootschalig misbruik op korte termijn aanwezig. Op dit moment wordt (nog) geen actief misbruik waargenomen en is (nog) geen publieke Proof-of-Concept (PoC) of exploit bekend, maar het NCSC verwacht deze wel op korte termijn en adviseert daarom deze updates met spoed in te zetten.\n\n```\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42904 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42915 | 5.70 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45655 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-45658 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50507 | 6.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Mark of the Web (MOTW): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45595 | 5.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44812 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42969 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42971 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42970 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42973 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42978 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42977 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42979 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42991 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41108 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45640 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34335 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45601 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45598 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45596 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45638 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45603 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42911 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nFunction Discovery Service (fdwsd.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42836 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-10263 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45657 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48583 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45653 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42984 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45588 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48568 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48570 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48573 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48575 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48576 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48578 | 7.90 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45654 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47289 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47653 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47654 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-48563 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42909 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42913 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42992 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44799 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44801 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42985 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-42993 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft UxTheme Library (uxtheme.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45606 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45600 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45608 | 6.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45599 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-45635 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45605 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows UEFI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45656 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-8863  | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Hotpatch Monitoring Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42910 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45642 | 3.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45639 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42908 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42989 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Collaborative Translation Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45586 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47288 | 7.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42903 | 6.50 | Denial-of-Service                   | \n| CVE-2026-42914 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44810 | 8.40 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45636 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40409 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40404 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42986 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45607 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-47652 | 8.20 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NT OS Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42980 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42916 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44809 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42837 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nUI Automation Manager (uiamanager.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45597 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47291 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Kinect: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41092 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SDK: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45593 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48574 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Performance Monitor: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42981 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42974 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Identity (AppID) Subsystem: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45594 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45604 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Administrator Protection: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42829 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRole: Windows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45641 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-42972 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48565 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45634 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45602 | 9.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Internet (wininet.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45592 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42987 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49160 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42912 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42968 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Controller (NC) Host Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44805 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48566 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45637 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42905 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44811 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42983 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44802 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44814 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44813 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Boot Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47656 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45487 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47648 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42906 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42907 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45648 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-06-09T15:44:28.000000Z"}, {"uuid": "b86a8039-3ff5-4d38-8168-407820b3c072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0184", "content": "Microsoft heeft kwetsbaarheden verholpen in Developer Tools. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals beschreven in de onderstaande tabellen.\n\nMet uitzondering van de kwetsbaarheid in .NET core, waarvoor geen voorafgaande authenticatie of gebruikersinteractie nodig is om een Denial-of-Service te veroorzaken, moet voor succesvol misbruik de kwaadwillende lokaal toegang hebben tot het kwetsbare systeem, of het slachtoffer misleiden een malafide broncodebestand te openen en uitvoeren.\n\n```\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47287 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-47292 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40376 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-47281 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-47284 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-48569 | 7.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45482 | 8.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft Live Share Canvas SDK: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45644 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nASP.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45591 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45490 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45491 | 6.20 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-06-09T16:23:58.000000Z"}, {"uuid": "a6b3743c-5e1c-4ba7-a58c-6745c49b8c7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47648", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0181", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot diverse categorie\u00ebn schade, zoals omschreven in onderstaande tabellen.\n\nTussen deze kwetsbaarheden zitten een zestal zeer ernstige, welke door Microsoft zijn ingeschaald met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden bevinden zich in diverse componenten van Windows die bereikbaar en benaderbaar zijn vanaf netwerkverbindingen, zoals http.sys, DHCP, de Kernel en TCP/IP. Door de externe bereikbaarheid en de mogelijkheden tot uitvoer van willekeurige code, is het risico op grootschalig misbruik op korte termijn aanwezig. Op dit moment wordt (nog) geen actief misbruik waargenomen en is (nog) geen publieke Proof-of-Concept (PoC) of exploit bekend, maar het NCSC verwacht deze wel op korte termijn en adviseert daarom deze updates met spoed in te zetten.\n\n```\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42904 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42915 | 5.70 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45655 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-45658 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50507 | 6.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Mark of the Web (MOTW): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45595 | 5.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44812 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42969 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42971 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42970 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42973 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42978 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42977 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42979 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42991 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41108 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45640 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34335 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45601 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45598 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45596 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45638 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45603 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42911 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nFunction Discovery Service (fdwsd.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42836 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-10263 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45657 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48583 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45653 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42984 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45588 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48568 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48570 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48573 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48575 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48576 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48578 | 7.90 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45654 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47289 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47653 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47654 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-48563 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42909 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42913 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42992 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44799 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44801 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42985 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-42993 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft UxTheme Library (uxtheme.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45606 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45600 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45608 | 6.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45599 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-45635 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45605 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows UEFI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45656 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-8863  | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Hotpatch Monitoring Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42910 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45642 | 3.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45639 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42908 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42989 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Collaborative Translation Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45586 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47288 | 7.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42903 | 6.50 | Denial-of-Service                   | \n| CVE-2026-42914 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44810 | 8.40 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45636 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40409 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40404 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42986 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45607 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-47652 | 8.20 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NT OS Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42980 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42916 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44809 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42837 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nUI Automation Manager (uiamanager.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45597 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47291 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Kinect: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41092 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SDK: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45593 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48574 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Performance Monitor: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42981 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42974 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Identity (AppID) Subsystem: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45594 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45604 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Administrator Protection: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42829 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRole: Windows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45641 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-42972 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48565 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45634 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45602 | 9.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Internet (wininet.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45592 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42987 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49160 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42912 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42968 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Controller (NC) Host Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44805 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48566 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45637 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42905 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44811 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42983 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44802 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44814 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44813 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Boot Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47656 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45487 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47648 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42906 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42907 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45648 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-06-09T15:44:28.000000Z"}, {"uuid": "56ab3ac1-6169-46b8-93a5-0d83ff3ac120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47284", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0184", "content": "Microsoft heeft kwetsbaarheden verholpen in Developer Tools. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals beschreven in de onderstaande tabellen.\n\nMet uitzondering van de kwetsbaarheid in .NET core, waarvoor geen voorafgaande authenticatie of gebruikersinteractie nodig is om een Denial-of-Service te veroorzaken, moet voor succesvol misbruik de kwaadwillende lokaal toegang hebben tot het kwetsbare systeem, of het slachtoffer misleiden een malafide broncodebestand te openen en uitvoeren.\n\n```\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47287 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-47292 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40376 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-47281 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-47284 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-48569 | 7.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45482 | 8.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft Live Share Canvas SDK: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45644 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nASP.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45591 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45490 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45491 | 6.20 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-06-09T16:23:58.000000Z"}, {"uuid": "1d2530d0-ef33-4b05-b962-c02a8d584f6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47655", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0183", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Azure componenten. Een kwaadwillende kan de kwetsbaarhen misbruiken om zich voor te doen als andere gebruiker, om zich verhoogde rechten toe te kennen, of willekeurige code uit te voeren en mogelijk toegang te krijgen tot gevoelige gegevens.\n\nDe ernstigste kwetsbaarheid bevond zich in HorizonDB en heeft kenmerk CVE-2026-48567 toegewezen gekregen. Deze kwetsbaarheid is reeds door Microsoft centraal verholpen en vereist geen verdere acties. Deze kwetsbaarheid is ter informatie opgenomen.\n\n```\nMicrosoft Graph: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47655 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nAzure Stack Edge: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41098 | 8.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47643 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Kubernetes Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-32193 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nAzure HorizonDB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48567 | 10.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-06-09T16:15:55.000000Z"}, {"uuid": "32760eab-2d91-40ba-8589-3c77994b9366", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47643", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0183", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Azure componenten. Een kwaadwillende kan de kwetsbaarhen misbruiken om zich voor te doen als andere gebruiker, om zich verhoogde rechten toe te kennen, of willekeurige code uit te voeren en mogelijk toegang te krijgen tot gevoelige gegevens.\n\nDe ernstigste kwetsbaarheid bevond zich in HorizonDB en heeft kenmerk CVE-2026-48567 toegewezen gekregen. Deze kwetsbaarheid is reeds door Microsoft centraal verholpen en vereist geen verdere acties. Deze kwetsbaarheid is ter informatie opgenomen.\n\n```\nMicrosoft Graph: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47655 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nAzure Stack Edge: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41098 | 8.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47643 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Kubernetes Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-32193 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nAzure HorizonDB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48567 | 10.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-06-09T16:15:55.000000Z"}, {"uuid": "2b96aedd-a604-4a02-89b6-b322960fc5a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47298", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0182", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten als Sharepoint, Wordt, Project en Excel. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals omschreven in onderstaande tabellen.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45467 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45468 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45479 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45453 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47298 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-47636 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47637 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-47638 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-47639 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47641 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-33113 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-45454 | 6.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-45462 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45464 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-45465 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47634 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-47640 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45481 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-45484 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48560 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-48562 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44812 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45475 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45486 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45485 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44819 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44821 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44824 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45466 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45643 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45457 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42835 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nOffice for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45649 | 7.10 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Project: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45483 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45472 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45474 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45456 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45458 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45460 | 4.70 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45461 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45645 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47635 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45463 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45469 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44817 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44818 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-44820 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44823 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44822 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45455 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45459 | 3.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Click-To-Run: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47293 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-06-09T16:04:53.000000Z"}, {"uuid": "ef749371-f41c-4f55-8f24-f680d1958154", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47636", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0182", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten als Sharepoint, Wordt, Project en Excel. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals omschreven in onderstaande tabellen.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45467 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45468 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45479 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45453 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47298 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-47636 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47637 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-47638 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-47639 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47641 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-33113 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-45454 | 6.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-45462 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45464 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-45465 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47634 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-47640 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45481 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-45484 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48560 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-48562 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44812 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45475 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45486 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45485 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44819 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44821 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44824 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45466 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45643 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45457 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42835 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nOffice for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45649 | 7.10 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Project: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45483 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45472 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45474 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45456 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45458 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45460 | 4.70 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45461 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45645 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47635 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45463 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45469 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44817 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44818 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-44820 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44823 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44822 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45455 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45459 | 3.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Click-To-Run: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47293 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-06-09T16:04:53.000000Z"}, {"uuid": "ee03db42-b41a-422d-bbe4-1e3bec936c44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47637", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0182", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten als Sharepoint, Wordt, Project en Excel. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals omschreven in onderstaande tabellen.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45467 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45468 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45479 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45453 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47298 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-47636 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47637 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-47638 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-47639 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47641 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-33113 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-45454 | 6.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-45462 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45464 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-45465 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47634 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-47640 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45481 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-45484 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48560 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-48562 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44812 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45475 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45486 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45485 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44819 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44821 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44824 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45466 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45643 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45457 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42835 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nOffice for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45649 | 7.10 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Project: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45483 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45472 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45474 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45456 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45458 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45460 | 4.70 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45461 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45645 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47635 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45463 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45469 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44817 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44818 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-44820 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44823 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44822 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45455 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45459 | 3.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Click-To-Run: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47293 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-06-09T16:04:53.000000Z"}, {"uuid": "f29c712e-a7d6-4a70-bfa0-ac5082331b16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47638", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0182", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten als Sharepoint, Wordt, Project en Excel. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals omschreven in onderstaande tabellen.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45467 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45468 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45479 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45453 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47298 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-47636 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47637 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-47638 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-47639 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47641 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-33113 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-45454 | 6.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-45462 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45464 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-45465 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47634 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-47640 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45481 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-45484 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48560 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-48562 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44812 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45475 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45486 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45485 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44819 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44821 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44824 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45466 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45643 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45457 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42835 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nOffice for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45649 | 7.10 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Project: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45483 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45472 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45474 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45456 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45458 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45460 | 4.70 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45461 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45645 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47635 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45463 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45469 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44817 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44818 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-44820 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44823 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44822 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45455 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45459 | 3.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Click-To-Run: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47293 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-06-09T16:04:53.000000Z"}, {"uuid": "70361ac6-9788-48b0-a929-47920968e05f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47639", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0182", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten als Sharepoint, Wordt, Project en Excel. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals omschreven in onderstaande tabellen.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45467 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45468 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45479 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45453 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47298 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-47636 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47637 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-47638 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-47639 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47641 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-33113 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-45454 | 6.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-45462 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45464 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-45465 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47634 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-47640 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45481 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-45484 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48560 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-48562 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44812 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45475 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45486 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45485 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44819 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44821 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44824 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45466 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45643 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45457 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42835 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nOffice for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45649 | 7.10 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Project: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45483 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45472 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45474 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45456 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45458 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45460 | 4.70 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45461 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45645 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47635 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45463 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45469 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44817 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44818 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-44820 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44823 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44822 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45455 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45459 | 3.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Click-To-Run: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47293 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-06-09T16:04:53.000000Z"}, {"uuid": "f74f6d9e-f17e-47f9-a1c9-134c76cd0d40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47641", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0182", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten als Sharepoint, Wordt, Project en Excel. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals omschreven in onderstaande tabellen.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45467 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45468 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45479 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45453 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47298 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-47636 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47637 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-47638 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-47639 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47641 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-33113 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-45454 | 6.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-45462 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45464 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-45465 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47634 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-47640 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45481 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-45484 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48560 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-48562 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44812 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45475 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45486 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45485 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44819 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44821 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44824 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45466 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45643 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45457 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42835 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nOffice for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45649 | 7.10 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Project: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45483 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45472 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45474 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45456 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45458 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45460 | 4.70 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45461 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45645 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47635 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45463 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45469 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44817 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44818 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-44820 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44823 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44822 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45455 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45459 | 3.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Click-To-Run: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47293 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-06-09T16:04:53.000000Z"}, {"uuid": "d919f431-8011-4e73-9526-2e9e0a465c36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47634", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0182", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten als Sharepoint, Wordt, Project en Excel. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals omschreven in onderstaande tabellen.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45467 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45468 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45479 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45453 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47298 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-47636 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47637 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-47638 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-47639 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47641 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-33113 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-45454 | 6.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-45462 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45464 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-45465 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47634 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-47640 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45481 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-45484 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48560 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-48562 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44812 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45475 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45486 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45485 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44819 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44821 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44824 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45466 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45643 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45457 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42835 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nOffice for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45649 | 7.10 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Project: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45483 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45472 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45474 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45456 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45458 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45460 | 4.70 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45461 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45645 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47635 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45463 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45469 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44817 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44818 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-44820 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44823 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44822 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45455 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45459 | 3.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Click-To-Run: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47293 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-06-09T16:04:53.000000Z"}, {"uuid": "cd3be928-6f9e-4a99-804c-f9fddafeb638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47640", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0182", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten als Sharepoint, Wordt, Project en Excel. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals omschreven in onderstaande tabellen.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45467 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45468 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45479 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45453 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47298 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-47636 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47637 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-47638 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-47639 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47641 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-33113 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-45454 | 6.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-45462 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45464 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-45465 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47634 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-47640 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45481 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-45484 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48560 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-48562 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44812 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45475 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45486 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45485 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44819 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44821 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44824 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45466 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45643 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45457 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42835 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nOffice for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45649 | 7.10 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Project: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45483 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45472 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45474 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45456 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45458 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45460 | 4.70 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45461 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45645 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47635 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45463 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45469 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44817 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44818 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-44820 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44823 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44822 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45455 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45459 | 3.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Click-To-Run: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47293 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-06-09T16:04:53.000000Z"}, {"uuid": "0056c201-d180-4983-90e3-0672dade5ca9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47293", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0182", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten als Sharepoint, Wordt, Project en Excel. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals omschreven in onderstaande tabellen.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45467 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45468 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45479 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45453 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47298 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-47636 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47637 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-47638 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-47639 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47641 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-33113 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-45454 | 6.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-45462 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45464 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-45465 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47634 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-47640 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45481 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-45484 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48560 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-48562 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44812 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45475 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45486 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45485 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44819 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44821 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44824 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45466 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45643 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45457 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42835 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nOffice for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45649 | 7.10 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Project: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45483 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45472 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45474 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45456 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45458 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45460 | 4.70 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45461 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45645 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47635 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45463 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45469 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44817 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44818 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-44820 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44823 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44822 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45455 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45459 | 3.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Click-To-Run: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47293 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-06-09T16:04:53.000000Z"}, {"uuid": "b09c87d9-3965-4183-857d-d6b35d5f6499", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47291", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "e029e6a9-ceb3-41ed-8930-014ff35d9f51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47644", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "74a44323-b022-4392-8615-ba21a77144f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47655", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "f4a2efe7-abe1-42f4-9edd-c8a1e32ed529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47652", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "7f9ef276-68d9-4b42-87c3-965c1d985833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47631", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "8b0311f3-055c-4ee7-b219-9b01c7dc54a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47640", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "27eebf23-d21d-4123-aa67-326c66b2f043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47284", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "2e5f2198-eba6-4548-93b0-7cabedd8af87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47635", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "3e8b39cb-36f7-48ce-9f6e-f35d8b1f4b35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47289", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "b515ab58-1149-4acf-ac69-875238cca186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47654", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "494dae43-a50d-420e-b451-63d8943f1ecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47288", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "878ef7ce-1930-4708-b0ca-6c5eec8c4be0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47643", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "cad680c8-28ca-4fb0-82c0-fd0a979f6757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47293", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "38d13a37-85c5-460e-8f47-1cae3d3f71c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47298", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "544cabcb-d9e7-4268-bdb7-6cd77e0c23b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47292", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "94c3c3c2-b4fd-4dfd-8ff3-4607b64789db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47636", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "f98246ed-8818-484a-973a-20617cbded77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47637", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "db0950e1-9cf4-4c25-afe9-60d2e9d6fba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47638", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "20a2c509-a012-4de4-bddc-d53144132009", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47639", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "c1a08150-6ecf-49a9-bdf4-f1ce6a9d8dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47641", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "aabe2020-a194-4704-b7f3-f34836b8e876", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47634", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "bc902c78-41c3-4a36-b843-60fe9b10a88c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47653", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "3d897b18-29cd-4683-8c91-bc9907e19d2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "6c7498ad-3f91-43a9-964c-e6b26836379d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47287", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "a7c94059-f96e-4f44-8f3d-9ece2b7cfb12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47656", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "c0087389-0a99-403d-b93b-9a450ae24760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47648", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "d21ea826-55a4-429a-8a99-f1a4df57a51b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47635", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0182", "content": "", "creation_timestamp": "2026-06-09T11:04:53.000000Z"}, {"uuid": "83bb28f6-b184-42cf-8c08-bb3d2cf16168", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47631", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0185", "content": "", "creation_timestamp": "2026-06-09T11:35:29.000000Z"}, {"uuid": "c766035d-266c-4abb-941f-3cc8d759b442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47907", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnv5z7dzfn2d", "content": "CVE-2026-47907 - Dreamweaver Desktop | Improper Access Control (CWE-284)\nCVE ID : CVE-2026-47907\n \n Published : 9. Juni 2026 20:16 | 20\u00a0Minuten ago\n \n Description : Dreamweaver Desktop versions 21.7 and earlier are affected by an Improper Access Control vulnerability that coul...", "creation_timestamp": "2026-06-09T21:41:46.144764Z"}, {"uuid": "8e54284c-80d9-4697-9c23-db2aa776eecf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47106", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnv6u2vvte23", "content": "CVE-2026-47106 - Ellucian Banner Self-Service Stored XSS via getFacultyMeetingTimes API\nCVE ID : CVE-2026-47106\n \n Published : 9. Juni 2026 20:16 | 20\u00a0Minuten ago\n \n Description : Ellucian Banner Self-Service before the April T2 release (2025-04-23) contains a stored cross-sit...", "creation_timestamp": "2026-06-09T21:56:49.304897Z"}, {"uuid": "15ff6e70-44fb-449f-8151-90e5b84a4cb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47908", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnv74zhxah2s", "content": "CVE-2026-47908 - Dreamweaver Desktop | Access of Uninitialized Pointer (CWE-824)\nCVE ID : CVE-2026-47908\n \n Published : 9. Juni 2026 20:16 | 20\u00a0Minuten ago\n \n Description : Dreamweaver Desktop versions 21.7 and earlier are affected by an Access of Uninitialized Pointer vulnera...", "creation_timestamp": "2026-06-09T22:01:49.032183Z"}, {"uuid": "57d13c0e-f719-4124-a5f7-ba86ef6bbc21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47929", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnv76t5dy62y", "content": "CVE-2026-47929 - ColdFusion | Incorrect Authorization (CWE-863)\nCVE ID : CVE-2026-47929\n \n Published : June 9, 2026, 8:33 p.m. | 42\u00a0minutes ago\n \n Description : ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Authorization vulnerability that could ...", "creation_timestamp": "2026-06-09T22:02:48.273354Z"}, {"uuid": "6c4c357c-b6c8-4396-85c8-c0c61231eb19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47932", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnv7gj4vo52e", "content": "CVE-2026-47932 - ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)\nCVE ID : CVE-2026-47932\n \n Published : June 9, 2026, 8:33 p.m. | 42\u00a0minutes ago\n \n Description : ColdFusion versions 2023.19, 2025.8 and earlier are affected b...", "creation_timestamp": "2026-06-09T22:07:06.108403Z"}, {"uuid": "8d3b910c-8248-4c57-a429-eadf6177bbbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47938", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnv7yh5zg627", "content": "CVE-2026-47938 - Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)\nCVE ID : CVE-2026-47938\n \n Published : June 9, 2026, 8:59 p.m. | 16\u00a0minutes ago\n \n Description : Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by a Se...", "creation_timestamp": "2026-06-09T22:17:08.187238Z"}, {"uuid": "a93b6639-52ce-4b22-b1ba-48b80743d2d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47931", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnvabg7ugb23", "content": "CVE-2026-47931 - ColdFusion | Improper Input Validation (CWE-20)\nCVE ID : CVE-2026-47931\n \n Published : June 9, 2026, 8:33 p.m. | 42\u00a0minutes ago\n \n Description : ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that cou...", "creation_timestamp": "2026-06-09T22:22:09.277725Z"}, {"uuid": "8f66351f-dbdd-493d-afff-4d766dc65bf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47930", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnvaketsgc2v", "content": "CVE-2026-47930 - ColdFusion | Improper Input Validation (CWE-20)\nCVE ID : CVE-2026-47930\n \n Published : June 9, 2026, 8:33 p.m. | 42\u00a0minutes ago\n \n Description : ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that cou...", "creation_timestamp": "2026-06-09T22:27:09.627081Z"}, {"uuid": "29168d57-cac4-4976-a2aa-4c5b43aa655f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47928", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnvatdnnrd2q", "content": "CVE-2026-47928 - ColdFusion | Improper Input Validation (CWE-20)\nCVE ID : CVE-2026-47928\n \n Published : June 9, 2026, 8:33 p.m. | 42\u00a0minutes ago\n \n Description : ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that cou...", "creation_timestamp": "2026-06-09T22:32:10.596836Z"}, {"uuid": "28d4d354-7a88-4825-ad72-c6ab09513e74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47068", "type": "published-proof-of-concept", "source": "https://github.com/phenixdigital/phoenix_storybook/security/advisories/GHSA-mrhx-6pw9-q5fh", "content": "", "creation_timestamp": "2026-05-20T11:02:29.000000Z"}, {"uuid": "256ff6ba-f44c-4c03-ab6c-2e8ea3d0e646", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47068", "type": "seen", "source": "https://gist.github.com/alon710/f640ae703fe7932b0c10bae26e654477", "content": "# CVE-2026-47068: CVE-2026-47068: Authorization Bypass via Cross-Session PubSub Topic Injection in phoenix_storybook\n\n> **CVSS Score:** 2.3\n> **Published:** 2026-06-09\n> **Full Report:** https://cvereports.com/reports/CVE-2026-47068\n\n## Summary\nA security vulnerability in the Elixir package phoenix_storybook (versions 0.4.0 up to 1.1.0) allows unauthenticated remote attackers to perform cross-session PubSub topic injection. By manipulating URL parameters, an attacker can hijack the real-time communications channel, enabling them to capture user state and control parameters from active sessions.\n\n## TL;DR\nUnauthenticated remote attackers can hijack active phoenix_storybook sessions by supplying a victim's PubSub topic via URL parameters, leading to potential cross-session state exposure.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-639\n- **Attack Vector**: Network\n- **CVSS Score**: 2.3 (Low)\n- **EPSS Score**: 0.00054\n- **Exploit Status**: No active public exploits\n- **KEV Status**: Not listed\n\n## Affected Systems\n\n- phoenix_storybook package for Elixir\n- **phoenix_storybook**: >= 0.4.0, < 1.1.0 (Fixed in: `1.1.0`)\n\n## Mitigation\n\n- Upgrade phoenix_storybook to version 1.1.0 or higher.\n- Ensure application endpoint configuration uses a secure, non-default secret_key_base.\n- Manually verify playground topic strings using Phoenix.Token in custom storybook setups.\n\n**Remediation Steps:**\n1. Inspect mix.exs to determine the current phoenix_storybook version.\n2. Update the dependency to `{:phoenix_storybook, \"~> 1.1.0\"}`.\n3. Run `mix deps.get` to download and compile the updated package.\n4. Verify deployment by inspecting URL parameters within the storybook playground iframe (should use 'playground_token' instead of 'topic').\n\n## References\n\n- [https://github.com/phenixdigital/phoenix_storybook/security/advisories/GHSA-mrhx-6pw9-q5fh](https://github.com/phenixdigital/phoenix_storybook/security/advisories/GHSA-mrhx-6pw9-q5fh)\n- [https://github.com/phenixdigital/phoenix_storybook/commit/6ee03f1c738d4436dde1b066cf65c80663d489f5](https://github.com/phenixdigital/phoenix_storybook/commit/6ee03f1c738d4436dde1b066cf65c80663d489f5)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-47068) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-09T22:51:34.000000Z"}, {"uuid": "d6c47002-f03d-498f-9afe-0d23ee9e87dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47955", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvchp5ryl2u", "content": "\ud83d\udfe0 CVE-2026-47955 - High (7.8)\n\nAcrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free v...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47955/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-09T23:01:28.636579Z"}, {"uuid": "a2a25d08-f967-4516-bd6d-9e8fe10efefd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47959", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvchxuqec2v", "content": "\ud83d\udfe0 CVE-2026-47959 - High (7.8)\n\nAcrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Stack-based Buff...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47959/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-09T23:01:37.699120Z"}, {"uuid": "fe327efe-c95b-4ca9-947c-050b16da0333", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47931", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvci7wcng2d", "content": "\ud83d\udfe0 CVE-2026-47931 - High (8.4)\n\nColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vuln...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47931/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-09T23:01:45.896347Z"}, {"uuid": "bd24021b-7fbd-4b40-a4e2-5752e0aae524", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47942", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mnvhhpj5gj2u", "content": "CVE-2026-47942 (MEDIUM) CVSS 5.4: https://experiencedigest.org/2026/06/09/4d369b.html", "creation_timestamp": "2026-06-10T00:30:56.871968Z"}, {"uuid": "9af3eb1f-eae9-45fc-93ff-a9370bc21da5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47966", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mnvhhs2aku26", "content": "CVE-2026-47966 (MEDIUM) CVSS 5.4: https://experiencedigest.org/2026/06/09/62e557.html", "creation_timestamp": "2026-06-10T00:30:58.935970Z"}, {"uuid": "2003344f-449b-43e9-9966-73dbf7b8e86c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47993", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mnvhhursai2d", "content": "CVE-2026-47993 (MEDIUM) CVSS 5.4: https://experiencedigest.org/2026/06/09/338a64.html", "creation_timestamp": "2026-06-10T00:31:01.705678Z"}, {"uuid": "bd39d112-7a30-4759-907e-436468f5b496", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47838", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnvlpsknco2h", "content": "CVE-2026-47838 - Unauthorized User Impersonation when Using X.509 Client Certificates\nCVE ID : CVE-2026-47838\n \n Published : June 10, 2026, 12:16 a.m. | 20\u00a0minutes ago\n \n Description : SubjectDnX509PrincipalExtractor does not correctly handle certain malformed X.509 certificat...", "creation_timestamp": "2026-06-10T01:47:12.254528Z"}, {"uuid": "ad3265f8-d8cd-412f-a5b6-e5cf8da41894", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47291", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116723710293796398", "content": "A lot of offensive activities were identified targeting Microsoft Windows (CVE-2026-47291) https://vuldb.com/vuln/369746/cti", "creation_timestamp": "2026-06-10T03:34:34.739221Z"}, {"uuid": "525e072d-1fe2-4645-b042-90b68bea3b8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47932", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnw5b3mdyo27", "content": "\ud83d\udfe0 CVE-2026-47932 - High (8.8)\n\nColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Limitation of a Pathn...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47932/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-10T07:00:57.504134Z"}, {"uuid": "6856c442-4d1c-4b47-9672-f543b271e603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47938", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnw5bdy7s42s", "content": "\ud83d\udd34 CVE-2026-47938 - Critical (10)\n\nAdobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by a Server-Side ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47938/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-10T07:01:06.601567Z"}, {"uuid": "98a25a05-b6ce-41ae-9331-9d0d16f08dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47952", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwalsmozx2v", "content": "\ud83d\udfe0 CVE-2026-47952 - High (7.8)\n\nAcrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Heap-based Buffe...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47952/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-10T08:00:39.177255Z"}, {"uuid": "cf4f9d1b-ed97-4405-a727-90efe9799c6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47921", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwalzqkz62p", "content": "\ud83d\udfe0 CVE-2026-47921 - High (7.8)\n\nAcrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free v...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47921/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-10T08:00:45.406756Z"}, {"uuid": "4eda1f18-0210-436f-be5d-c557d6685ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47928", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwamaibk62s", "content": "\ud83d\udd34 CVE-2026-47928 - Critical (9.6)\n\nColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vuln...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47928/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-10T08:00:52.413806Z"}, {"uuid": "dac6c30f-3633-4b03-b93c-c09cf7f669c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47929", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwdx7bjkc2n", "content": "\ud83d\udfe0 CVE-2026-47929 - High (8.4)\n\nColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Authorization vulner...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47929/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-10T09:01:10.621114Z"}, {"uuid": "c4576d0a-ecee-4ea6-8aff-b8a76b33a8f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47930", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwdxh5ab625", "content": "\ud83d\udfe0 CVE-2026-47930 - High (8.1)\n\nColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vuln...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47930/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-10T09:01:14.989689Z"}, {"uuid": "7854e9ac-1650-4fe2-adfc-0703f92920c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47913", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwdxp5yde2q", "content": "\ud83d\udfe0 CVE-2026-47913 - High (7.8)\n\nAcrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free v...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47913/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-10T09:01:17.175142Z"}, {"uuid": "35438d0a-734c-44eb-8bea-7d8663e8fb68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47906", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mnweavss3g27", "content": "CVE-2026-47906 - High severity code execution in Dreamweaver 21.7 and earlier. User interaction required. CVSS 8.6. No patch available. Avoid opening untrusted files. #CVE #Dreamweaver #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-47906/", "creation_timestamp": "2026-06-10T09:06:07.323436Z"}, {"uuid": "05df86c3-da2a-4d86-b250-91d30daaa71f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47291", "type": "seen", "source": "https://www.ncsc.nl/alerts/microsoft-verhelpt-6-ernstige-kwetsbaarheden-in-windows", "content": "", "creation_timestamp": "2026-06-10T00:41:53.000000Z"}, {"uuid": "1be83a2c-0a5c-4543-833f-11feed9233ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47291", "type": "seen", "source": "https://www.cert.dk/news/2026-06-10/Patch-Tuesday-i-overdrive-206-CVEer-peger-paa-et-nyt-normalniveau", "content": "", "creation_timestamp": "2026-06-10T01:30:14.000000Z"}, {"uuid": "035117aa-20f8-4221-87d7-64722419f0b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47914", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwhcppjnh26", "content": "\ud83d\udfe0 CVE-2026-47914 - High (7.8)\n\nAcrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free v...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47914/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-10T10:00:49.985694Z"}, {"uuid": "491e05f4-7117-40d8-9c62-1888cf0b733e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47915", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwhcxhjig2y", "content": "\ud83d\udfe0 CVE-2026-47915 - High (7.8)\n\nAcrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free v...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47915/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-10T10:00:58.325875Z"}, {"uuid": "4a1ef472-8afb-4af5-ae1e-e3376e0f1acf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47916", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwhd7a6w72n", "content": "\ud83d\udfe0 CVE-2026-47916 - High (7.8)\n\nAcrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free v...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47916/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-10T10:01:38.551082Z"}, {"uuid": "cba8ba8b-7cd7-4204-91e2-24486b3eeee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47917", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwrddctew27", "content": "\ud83d\udfe0 CVE-2026-47917 - High (7.8)\n\nAcrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free v...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47917/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-10T13:00:07.826018Z"}, {"uuid": "6d33dd55-c6ac-4672-93e3-0fea32e38e9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47643", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnwrvejgpe26", "content": "\ud83d\udd17 CVE : CVE-2026-32193, CVE-2026-41098, CVE-2026-47643, CVE-2026-32193, CVE-2026-41098, CVE-2026-47643", "creation_timestamp": "2026-06-10T13:10:12.161444Z"}, {"uuid": "e4e9099f-3c39-47e3-bf29-e6519c7063fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47291", "type": "seen", "source": "https://www.cert.se/2026/06/patchtisdag-juni-2026-samlad-information-om-manadens-sakerhetsuppdateringar.html", "content": "", "creation_timestamp": "2026-06-10T05:00:00.000000Z"}, {"uuid": "1d98ee9f-b76a-4926-ba58-39faab362c09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47348", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnws6y5lau2n", "content": "\ud83d\udd17 CVE : CVE-2026-11607, CVE-2026-47348, CVE-2026-47349, CVE-2026-47350, CVE-2026-47351, CVE-2026-47352, CVE-2026-49738, CVE-2026-49740, CVE-2026-49741, CVE-2026-49742", "creation_timestamp": "2026-06-10T13:15:34.522420Z"}, {"uuid": "97ddc251-3cef-4b2f-bea6-8d76b4a4e214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47349", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnws6y5lau2n", "content": "\ud83d\udd17 CVE : CVE-2026-11607, CVE-2026-47348, CVE-2026-47349, CVE-2026-47350, CVE-2026-47351, CVE-2026-47352, CVE-2026-49738, CVE-2026-49740, CVE-2026-49741, CVE-2026-49742", "creation_timestamp": "2026-06-10T13:15:34.713479Z"}, {"uuid": "6bee5823-8820-465a-88db-af13a31772c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47350", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnws6y5lau2n", "content": "\ud83d\udd17 CVE : CVE-2026-11607, CVE-2026-47348, CVE-2026-47349, CVE-2026-47350, CVE-2026-47351, CVE-2026-47352, CVE-2026-49738, CVE-2026-49740, CVE-2026-49741, CVE-2026-49742", "creation_timestamp": "2026-06-10T13:15:34.861785Z"}, {"uuid": "f2f9e9ae-3285-4806-bb00-848edf0e620e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47351", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnws6y5lau2n", "content": "\ud83d\udd17 CVE : CVE-2026-11607, CVE-2026-47348, CVE-2026-47349, CVE-2026-47350, CVE-2026-47351, CVE-2026-47352, CVE-2026-49738, CVE-2026-49740, CVE-2026-49741, CVE-2026-49742", "creation_timestamp": "2026-06-10T13:15:35.136399Z"}, {"uuid": "7323e397-5d7a-4f05-a912-08a6d0bedcbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47352", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnws6y5lau2n", "content": "\ud83d\udd17 CVE : CVE-2026-11607, CVE-2026-47348, CVE-2026-47349, CVE-2026-47350, CVE-2026-47351, CVE-2026-47352, CVE-2026-49738, CVE-2026-49740, CVE-2026-49741, CVE-2026-49742", "creation_timestamp": "2026-06-10T13:15:35.284243Z"}, {"uuid": "a060ab9f-675a-45a6-a08e-625948b50059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47921", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mnwvj2vwsu2k", "content": "CVE-2026-47921 - Critical Use After Free in Acrobat Reader. CVSS 7.8. Could lead to arbitrary code execution. No patch available yet. Avoid opening untrusted PDFs. #CVE #Adobe #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-47921/", "creation_timestamp": "2026-06-10T14:14:55.883127Z"}, {"uuid": "57442b49-3baa-4430-badf-468679d7b46d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47343", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-typo3-cms", "content": "", "creation_timestamp": "2026-06-10T03:07:26.000000Z"}, {"uuid": "ed7243b0-5f61-4987-816b-367b44b4d499", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47346", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-typo3-cms", "content": "", "creation_timestamp": "2026-06-10T03:07:26.000000Z"}, {"uuid": "6fbd6a61-388b-44a8-ad2a-7a5889f1ebbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47895", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mnwvzxxw4224", "content": "\ud83d\udee1\ufe0f Vulnerabilidade cr\u00edtica no strongSwan (CVE-2026-47895) afeta todas as vers\u00f5es desde 2010. Aprenda a verificar, corrigir com um script e aplicar mitiga\u00e7\u00e3o tempor\u00e1ria no SUSE. Saiba mais: -> tinyurl.com/3ke82wbe  #SUSE", "creation_timestamp": "2026-06-10T14:24:44.700048Z"}, {"uuid": "741ee6aa-4b2d-436c-8b30-34c9d5f5ccd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47895", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mnwvzz5txs24", "content": "\ud83d\udee1\ufe0f Vulnerabilidade cr\u00edtica no strongSwan (CVE-2026-47895) afeta todas as vers\u00f5es desde 2010. Aprenda a verificar, corrigir com um script e aplicar mitiga\u00e7\u00e3o tempor\u00e1ria no SUSE. Saiba mais: -> tinyurl.com/3ke82wbe  #SUSE", "creation_timestamp": "2026-06-10T14:24:49.542129Z"}, {"uuid": "f0dcc0dc-9040-485b-9bd2-adb2abaa3cab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47342", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mnxb5o5xhv22", "content": "CVE-2026-47342: Apache OFBiz: Privilege Escalation via updateOrRemove Authorization Bypass", "creation_timestamp": "2026-06-10T17:43:16.620111Z"}, {"uuid": "26aba2ae-e808-4dc4-9b2f-d633aca1186d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47653", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116727094432319958", "content": "A new vulnerability with increased severity was disclosed for Microsoft Windows (CVE-2026-47653) https://vuldb.com/vuln/369762", "creation_timestamp": "2026-06-10T17:56:09.915523Z"}, {"uuid": "5e4c22d6-ec56-43cb-a275-839f092025da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47253", "type": "published-proof-of-concept", "source": "https://github.com/julien040/anyquery/security/advisories/GHSA-j9rx-rppg-6hh4", "content": "", "creation_timestamp": "2026-06-09T21:19:22.000000Z"}, {"uuid": "a4ca3a7e-d3b1-4f28-bd87-a4f9210c7655", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47652", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116727251681369812", "content": "There is a new vulnerability with elevated criticality in Microsoft Windows (CVE-2026-47652) https://vuldb.com/vuln/369761", "creation_timestamp": "2026-06-10T18:36:52.863191Z"}, {"uuid": "8e9d2f60-a86b-465a-b6ef-38410d1eebbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47652", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnxftmee7o27", "content": "\ud83d\udccc CVE-2026-47652 - Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally. https://www.cyberhub.blog/cves/CVE-2026-47652", "creation_timestamp": "2026-06-10T19:07:07.870640Z"}, {"uuid": "cf0e478d-6aee-4e3d-ba8e-5dde3bf0b459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47941", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mnxiujxye52j", "content": "CVE-2026-47941 (MEDIUM) CVSS 5.4: https://experiencedigest.org/2026/06/10/160034.html", "creation_timestamp": "2026-06-10T20:01:20.281053Z"}, {"uuid": "5c75960e-4374-4a98-a071-7bd0c9ff3298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47944", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mnxiz4zutw2q", "content": "CVE-2026-47944 (MEDIUM) CVSS 5.4: https://experiencedigest.org/2026/06/10/160315.html", "creation_timestamp": "2026-06-10T20:03:54.288403Z"}, {"uuid": "da5c4a84-aebd-432d-b836-4f212534dad2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47946", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mnxj25bawp22", "content": "CVE-2026-47946 (MEDIUM) CVSS 5.4: https://experiencedigest.org/2026/06/10/160355.html", "creation_timestamp": "2026-06-10T20:04:27.918023Z"}, {"uuid": "cdef744b-eb73-46a1-8fb0-5651e845a146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47939", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mnxj4zowxe2u", "content": "CVE-2026-47939 (MEDIUM) CVSS 5.4: https://experiencedigest.org/2026/06/10/160538.html", "creation_timestamp": "2026-06-10T20:06:05.059317Z"}, {"uuid": "682a2ead-262a-4855-9606-8a3e869e6577", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47936", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mnxjbifi562j", "content": "CVE-2026-47936 (MEDIUM) CVSS 5.4: https://experiencedigest.org/2026/06/10/cve-medium-cvss.html", "creation_timestamp": "2026-06-10T20:08:34.941103Z"}, {"uuid": "cf2466af-b80d-4612-bfed-983f672d0978", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47291", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnxpviddln2h", "content": "\ud83d\udccc CVE-2026-47291 - Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-47291", "creation_timestamp": "2026-06-10T22:07:08.055058Z"}, {"uuid": "95a2f6c8-46c7-4023-86f5-8e11a4cdcc68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47763", "type": "published-proof-of-concept", "source": "https://github.com/pdm-project/pdm/security/advisories/GHSA-ghq2-5c67-fprm", "content": "", "creation_timestamp": "2026-05-21T07:16:44.000000Z"}, {"uuid": "a4249a92-7c9d-465a-b380-05516d76f35e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47753", "type": "published-proof-of-concept", "source": "https://github.com/lxc/incus/security/advisories/GHSA-8g7m-96c8-8wwc", "content": "", "creation_timestamp": "2026-05-28T22:27:20.000000Z"}, {"uuid": "be589ba3-87c9-469a-8247-4cee04a06256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47291", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mnxwfaylc22s", "content": "Microsoft\u30012026\u5e746\u6708\u5b9a\u4f8b\u30d1\u30c3\u30c1\u3067\u53f2\u4e0a\u6700\u591a206\u4ef6\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63-3\u4ef6\u306e\u30bc\u30ed\u30c7\u30a4\u3084\u5371\u967a\u306a\u8106\u5f31\u6027\u542b\u3080(CVE-2026-50507,CVE-2026-45586,CVE-2026-47291,CVE-2026-49160)\n\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews", "creation_timestamp": "2026-06-11T00:03:23.905892Z"}, {"uuid": "04462cc9-9a93-4b4b-920b-1fbafd744d09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47342", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mny3lqxsss2l", "content": "CVE-2026-47342 - Apache OFBiz: Privilege Escalation via updateOrRemove Authorization Bypass\nCVE ID : CVE-2026-47342\n \n Published : June 10, 2026, 11:16 p.m. | 2\u00a0hours, 1\u00a0minute ago\n \n Description : A privilege escalation vulnerability in Apache OFBiz allows a low-privileged au...", "creation_timestamp": "2026-06-11T01:36:26.376571Z"}, {"uuid": "d21dcf1a-52f5-4262-b413-ebe7dcb1b87f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47734", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mny4r2t3xu2i", "content": "CVE-2026-47734 - Dulwich has unbounded memory allocation in receive-pack from crafted thin packs\nCVE ID : CVE-2026-47734\n \n Published : June 10, 2026, 11:16 p.m. | 2\u00a0hours, 1\u00a0minute ago\n \n Description : Dulwich is a pure-Python implementation of the Git file formats and protoc...", "creation_timestamp": "2026-06-11T01:57:18.342148Z"}, {"uuid": "360ec786-5bef-4d67-979b-67e79c91b050", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47213", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mny4w26ina2i", "content": "CVE-2026-47213 - BoxLite: Timeout Bypass Vulnerability\nCVE ID : CVE-2026-47213\n \n Published : June 10, 2026, 11:16 p.m. | 2\u00a0hours, 1\u00a0minute ago\n \n Description : Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI contain...", "creation_timestamp": "2026-06-11T02:00:05.696536Z"}, {"uuid": "46114b19-e7d1-4128-87a7-045ae7694be9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47166", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mny6bpfzzb2h", "content": "CVE-2026-47166 - ImageMagick: Heap Buffer Over-Read in distributed pixel cache server\nCVE ID : CVE-2026-47166\n \n Published : June 10, 2026, 11:16 p.m. | 2\u00a0hours, 1\u00a0minute ago\n \n Description : ImageMagick is free and open-source software used for editing and manipulating digita...", "creation_timestamp": "2026-06-11T02:24:30.721663Z"}, {"uuid": "9ff81fc1-f16d-475b-a4a3-be49c19eef44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47165", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mny6koag3r2d", "content": "CVE-2026-47165 - ImageMagick: Information Disclosure in distributed pixel cache server because it is not using a challenge\u2013response authentication model\nCVE ID : CVE-2026-47165\n \n Published : June 10, 2026, 11:16 p.m. | 2\u00a0hours, 1\u00a0minute ago\n \n Description : ImageMagick is fre...", "creation_timestamp": "2026-06-11T02:29:31.421286Z"}, {"uuid": "7d9e559f-01a3-4248-bd3b-fb58e46aeb5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47712", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mny74lz6422c", "content": "CVE-2026-47712 - Dulwich doesn't sanitize commit subjects in `porcelain.format_patch`\nCVE ID : CVE-2026-47712\n \n Published : June 10, 2026, 11:16 p.m. | 2\u00a0hours, 1\u00a0minute ago\n \n Description : Dulwich is a pure-Python implementation of the Git file formats and protocols. Starti...", "creation_timestamp": "2026-06-11T02:39:34.131420Z"}, {"uuid": "59fd00b7-4704-4d5e-9396-bca6fe1737f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47372", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mnzee7ymek2l", "content": "\ud83d\udee1\ufe0f Se voc\u00ea usa Ubuntu, verifique sua vers\u00e3o do libcrypt-saltedhash-perl agora mesmo! Uma vulnerabilidade (CVE-2026-47372) permite prever salts de hashes. Saiba mais: ->  tinyurl.com/vk9zybu2 #Ubuntu", "creation_timestamp": "2026-06-11T13:45:59.161296Z"}, {"uuid": "5ce2400b-6026-4f46-b244-7b1fed242866", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47372", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mnzeeb3sds2l", "content": "\ud83d\udee1\ufe0f Se voc\u00ea usa Ubuntu, verifique sua vers\u00e3o do libcrypt-saltedhash-perl agora mesmo! Uma vulnerabilidade (CVE-2026-47372) permite prever salts de hashes. Saiba mais: ->  tinyurl.com/vk9zybu2 #Ubuntu", "creation_timestamp": "2026-06-11T13:45:59.688043Z"}, {"uuid": "22479c8f-1a99-41d5-a586-4a78aab34077", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4764", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnzehbuzqe2m", "content": "CVE-2026-4764 - Privilege Escalation in Dialogflow CX via Playbook Import\nCVE ID : CVE-2026-4764\n \n Published : June 11, 2026, 12:16 p.m. | 47\u00a0minutes ago\n \n Description : A Missing Authorization vulnerability in the playbook import functionality in Dialogflow CX on Google Clo...", "creation_timestamp": "2026-06-11T13:47:39.790870Z"}, {"uuid": "15b83f66-03aa-4e83-8ed7-b0c861a02905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47781", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-qq6c-99pv-prvf", "content": "", "creation_timestamp": "2026-06-11T13:25:28.000000Z"}, {"uuid": "ade0951f-6431-4856-97e7-a34442d391a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47780", "type": "published-proof-of-concept", "source": "https://github.com/free5gc/free5gc/security/advisories/GHSA-6gxq-gpr8-xgjp", "content": "", "creation_timestamp": "2026-06-10T08:23:38.000000Z"}, {"uuid": "cc491435-c4b9-459a-9319-77fe1ad941c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnzkcsp7ks2d", "content": "2/ \ud83d\udc80 Hours after the patches, a researcher dropped \"RoguePlanet\" (CVE-2026-47281, CVSS 9.6): SYSTEM-level escalation via VS Code + Defender. Active exploitation confirmed. AI-speed offense is here.", "creation_timestamp": "2026-06-11T15:32:33.449165Z"}, {"uuid": "14919dea-0518-4e43-b1a7-e6d99ca68328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnzkcspmb22d", "content": "2/ \ud83d\udc80 Hours after the patches, a researcher dropped \"RoguePlanet\" (CVE-2026-47281, CVSS 9.6): SYSTEM-level escalation via VS Code + Defender. Active exploitation confirmed. AI-speed offense is here.", "creation_timestamp": "2026-06-11T15:32:35.423439Z"}, {"uuid": "f5caf4d9-fcbc-4b14-ad3b-2a2f561b6271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnzkcspnac2d", "content": "2/ \ud83d\udc80 Hours after the patches, a researcher dropped \"RoguePlanet\" (CVE-2026-47281, CVSS 9.6): SYSTEM-level escalation via VS Code + Defender. Active exploitation confirmed. AI-speed offense is here.", "creation_timestamp": "2026-06-11T15:33:40.167361Z"}, {"uuid": "9e0bc1a9-b73d-48f6-9644-9e6ee7a62a53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnzkcspp6s2d", "content": "2/ \ud83d\udc80 Hours after the patches, a researcher dropped \"RoguePlanet\" (CVE-2026-47281, CVSS 9.6): SYSTEM-level escalation via VS Code + Defender. Active exploitation confirmed. AI-speed offense is here.", "creation_timestamp": "2026-06-11T15:33:42.127916Z"}, {"uuid": "20e72e36-1614-4a98-938a-95363ff38c25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnzkcspu322d", "content": "2/ \ud83d\udc80 Hours after the patches, a researcher dropped \"RoguePlanet\" (CVE-2026-47281, CVSS 9.6): SYSTEM-level escalation via VS Code + Defender. Active exploitation confirmed. AI-speed offense is here.", "creation_timestamp": "2026-06-11T15:33:43.917180Z"}, {"uuid": "deb40adb-2501-4d46-aa7b-5b3e9d40e12d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnzkcspv2c2d", "content": "2/ \ud83d\udc80 Hours after the patches, a researcher dropped \"RoguePlanet\" (CVE-2026-47281, CVSS 9.6): SYSTEM-level escalation via VS Code + Defender. Active exploitation confirmed. AI-speed offense is here.", "creation_timestamp": "2026-06-11T15:33:45.815011Z"}, {"uuid": "77316839-7a02-48ae-bff8-9590e555118b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnzkcspvzk2d", "content": "2/ \ud83d\udc80 Hours after the patches, a researcher dropped \"RoguePlanet\" (CVE-2026-47281, CVSS 9.6): SYSTEM-level escalation via VS Code + Defender. Active exploitation confirmed. AI-speed offense is here.", "creation_timestamp": "2026-06-11T15:33:47.409904Z"}, {"uuid": "98a09ef5-208b-4930-b478-dbde039f63a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnzkcspwys2d", "content": "2/ \ud83d\udc80 Hours after the patches, a researcher dropped \"RoguePlanet\" (CVE-2026-47281, CVSS 9.6): SYSTEM-level escalation via VS Code + Defender. Active exploitation confirmed. AI-speed offense is here.", "creation_timestamp": "2026-06-11T15:33:49.163106Z"}, {"uuid": "c382400a-75c7-42e0-a0dc-4c1f084e0101", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnzkcspxy22d", "content": "2/ \ud83d\udc80 Hours after the patches, a researcher dropped \"RoguePlanet\" (CVE-2026-47281, CVSS 9.6): SYSTEM-level escalation via VS Code + Defender. Active exploitation confirmed. AI-speed offense is here.", "creation_timestamp": "2026-06-11T15:33:51.865520Z"}, {"uuid": "688f35f5-6d28-4fde-aee1-7111e84109e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47101", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mo23dfxbkd2j", "content": "\ud83d\udccc CVE-2026-47101 - LiteLLM prior to 1.83.14 allows an authenticated internal_user to create API keys with access to routes that their role does not permit. When generati... https://www.cyberhub.blog/cves/CVE-2026-47101", "creation_timestamp": "2026-06-11T20:37:06.405558Z"}, {"uuid": "26b9c465-a8f9-448b-ab5d-2c3d69eb0d30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47907", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mo2r4tufxi2i", "content": "\ud83d\udccc CVE-2026-47907 - Dreamweaver Desktop versions 21.7 and earlier are affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. ... https://www.cyberhub.blog/cves/CVE-2026-47907", "creation_timestamp": "2026-06-12T03:07:08.034514Z"}, {"uuid": "4329d71c-d207-4eaa-8aac-217e422c7586", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47102", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mo2bzzbyub2c", "content": "\ud83d\udccc CVE-2026-47102 - LiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update endpoint. While the endpoint correctly restricts users to up... https://www.cyberhub.blog/cves/CVE-2026-47102", "creation_timestamp": "2026-06-11T22:37:07.343881Z"}, {"uuid": "01a68443-cddb-487e-93f5-82bfa0884f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47906", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mo2h2xtdbn2o", "content": "\ud83d\udccc CVE-2026-47906 - Dreamweaver Desktop versions 21.7 and earlier are affected by a Dependency on Vulnerable Third-Party Component vulnerability that could result in arbi... https://www.cyberhub.blog/cves/CVE-2026-47906", "creation_timestamp": "2026-06-12T00:07:07.722475Z"}, {"uuid": "eadbf4ed-3495-43f4-bd3a-94c7574bdc5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47635", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mo2iqmdhie22", "content": "\ud83d\udccc CVE-2026-47635 - Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. https://www.cyberhub.blog/cves/CVE-2026-47635", "creation_timestamp": "2026-06-12T00:37:07.567119Z"}, {"uuid": "2b1671f5-1049-41ab-9ea4-597e2a86dd69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47238", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo2nxqi4ly23", "content": "CVE-2026-47238 - ClipBucket: IDOR in videos subtitle editor\nCVE ID : CVE-2026-47238\n \n Published : June 11, 2026, 11:16 p.m. | 2\u00a0hours, 3\u00a0minutes ago\n \n Description : ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #133, a normal authenticated ...", "creation_timestamp": "2026-06-12T02:10:35.778054Z"}, {"uuid": "80c762e0-a758-43e0-a389-20a82ea00e86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47370", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mo2vrtqjbs2k", "content": "\u26a0\ufe0f CRITICAL: UniFi OS Server faces CVE-2026-47370 (CVSS 9.9) command injection risk from low-priv users. No patch yet \u2014 limit device access & monitor closely. Full details: https://radar.offseq.com/threat/cve-2026-47370-cwe-20-improper-input-validation-in-1af657c9 #OffSeq #Vulnerability #UniFiOS", "creation_timestamp": "2026-06-12T04:30:28.378047Z"}, {"uuid": "6d13394f-14f5-48fe-9873-3740ace9d5d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47367", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2xhmx67l26", "content": "\ud83d\udd34 CVE-2026-47367 - Critical (9.9)\n\nA malicious actor with access to the network and low privileges could exploit an Improper Input V...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47367/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-12T05:00:34.027722Z"}, {"uuid": "40354b2a-7fd9-4820-b5a8-43f2dad9135b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47365", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo2y54jypy25", "content": "CVE-2026-47365 - WordPress Toolkit Argument Injection\nCVE ID : CVE-2026-47365\n \n Published : June 12, 2026, 4:17 a.m. | 49\u00a0minutes ago\n \n Description : Argument injection vulnerability in WordPress Toolkit before 6.11.0 as used in cPanel & WHM, allows remote authenticated ...", "creation_timestamp": "2026-06-12T05:12:33.431422Z"}, {"uuid": "de2b3ae0-05da-4184-abb1-78ae43250594", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47368", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo2yf3wtag23", "content": "CVE-2026-47368 - UniFi OS Path Traversal\nCVE ID : CVE-2026-47368\n \n Published : June 12, 2026, 4:17 a.m. | 49\u00a0minutes ago\n \n Description : A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to obt...", "creation_timestamp": "2026-06-12T05:17:00.935192Z"}, {"uuid": "0888bb7c-6e76-4332-b8fd-8c278f6f364f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47369", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo2yohqgv22p", "content": "CVE-2026-47369 - UniFi OS Improper Input Validation Privilege Escalation\nCVE ID : CVE-2026-47369\n \n Published : June 12, 2026, 4:17 a.m. | 49\u00a0minutes ago\n \n Description : A malicious actor with access to the network and low privileges could exploit an Improper Input Validation...", "creation_timestamp": "2026-06-12T05:22:15.375953Z"}, {"uuid": "725a104d-078e-46bb-91ca-95cdc76f813f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47367", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo32d2wc762j", "content": "CVE-2026-47367 - UID Enterprise Agent Command Injection\nCVE ID : CVE-2026-47367\n \n Published : June 12, 2026, 4:17 a.m. | 49\u00a0minutes ago\n \n Description : A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability fo...", "creation_timestamp": "2026-06-12T05:51:43.061253Z"}, {"uuid": "2b12c99f-5895-48ae-808a-eaacabdc59d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47370", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo32lzdr7t2o", "content": "CVE-2026-47370 - UniFi OS Command Injection\nCVE ID : CVE-2026-47370\n \n Published : June 12, 2026, 4:17 a.m. | 49\u00a0minutes ago\n \n Description : A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certa...", "creation_timestamp": "2026-06-12T05:56:40.743063Z"}, {"uuid": "b4341f5e-cf7a-4cbf-bb6b-e63c143abd97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47368", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo32tizycu2n", "content": "\ud83d\udfe0 CVE-2026-47368 - High (8.6)\n\nA malicious actor with access to the network could exploit a Path Traversal vulnerability found i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47368/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-12T06:00:53.110734Z"}, {"uuid": "4fc4b0b0-269f-4025-9c2d-474ac2225fed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47369", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo32tq5wkr2p", "content": "\ud83d\udd34 CVE-2026-47369 - Critical (9.9)\n\nA malicious actor with access to the network and low privileges could exploit an Improper Input V...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47369/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-12T06:01:00.427548Z"}, {"uuid": "1d38d639-cbf3-4bc1-8a76-3eb17416327a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47365", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mo37a36mva2v", "content": "WordPress Toolkit 6.11.0 \u672a\u6e80\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u3055\u308c\u305f\u30e6\u30fc\u30b6\u30fc\u304c\u4ed6\u30a2\u30ab\u30a6\u30f3\u30c8\u306eCLI\u30b3\u30de\u30f3\u30c9\u5b9f\u884c\u3092\u8a31\u53ef\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-47365 CVSS 9.9 | CRITICAL", "creation_timestamp": "2026-06-12T07:19:28.737655Z"}, {"uuid": "df22ad5c-8d43-45af-af9c-e05c2abf8f50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47366", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mo37c7hrvy2z", "content": "ACP\u3067\u6a29\u9650\u5909\u66f4\u6642\u306e\u30a2\u30af\u30bb\u30b9\u6a29\u691c\u8a3c\u4e0d\u5099\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u6e08\u307f\u7ba1\u7406\u8005\u304c\u81ea\u8eab\u306e\u6a29\u9650\u3092\u8d85\u3048\u308b\u6a29\u9650\u3092\u4ed8\u4e0e\u53ef\u80fd\u306b\u306a\u308a\u3001\u7ba1\u7406\u753b\u9762\u5185\u3067\u6a29\u9650\u6607\u683c\u304c\u767a\u751f\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-47366 CVSS 7.2 | HIGH", "creation_timestamp": "2026-06-12T07:20:40.281365Z"}, {"uuid": "3e289c57-b3be-48e8-8217-69c22714c7c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47370", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo3bk3dhtm2y", "content": "\ud83d\udd34 CVE-2026-47370 - Critical (9.9)\n\nA malicious actor with access to the network and low privileges could exploit an Improper Input V...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47370/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-12T08:00:53.572972Z"}, {"uuid": "e1f55648-d550-4eab-811c-cfb110dd6770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47365", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo3blnklpx24", "content": "\ud83d\udd34 CVE-2026-47365 - Critical (9.9)\n\nArgument injection vulnerability in WordPress Toolkit before 6.11.0 as used in cPanel & WHM, allo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47365/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-12T08:01:49.109084Z"}, {"uuid": "bbd94e1f-98f3-42c8-bf68-e5435ac91758", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mo3rm3en6x2v", "content": "Squid CVE-2026-47729 and CVE-2026-50012", "creation_timestamp": "2026-06-12T12:48:18.898740Z"}, {"uuid": "45818e34-cfc4-4131-a2ba-6cd3228f3047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47825", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mo3rytodm42d", "content": "\ud83d\udd17 CVE : CVE-2026-41708, CVE-2026-47825", "creation_timestamp": "2026-06-12T12:55:27.785459Z"}, {"uuid": "daeb9786-76ac-40fe-abff-df053c770e51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47197", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo3u265rbw2q", "content": "CVE-2026-47197 - Quest Bot: Discord moderation role hierarchy bypass in ban, kick, mute, unmute, warn, and nickname commands\nCVE ID : CVE-2026-47197\n \n Published : 2026\u5e746\u670812\u65e5 11:52 | 1\u00a0\u5c0f\u65f6\uff0c30\u00a0\u5206\u949f ago\n \n Description : Quest Bot is an opensource Discord Bot. Prior to version 1.1.6...", "creation_timestamp": "2026-06-12T13:31:59.162364Z"}, {"uuid": "75af8196-ecf0-4920-8008-e8408acb101f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47195", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo3v5xts342j", "content": "CVE-2026-47195 - Quest Bot: Per-channel permission overwrite bypass in purge and slowmode commands.\nCVE ID : CVE-2026-47195\n \n Published : 2026\u5e746\u670812\u65e5 11:52 | 1\u00a0\u5c0f\u65f6\uff0c31\u00a0\u5206\u949f ago\n \n Description : Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, the purge and slowmode ...", "creation_timestamp": "2026-06-12T13:52:29.164521Z"}, {"uuid": "7c4e9ae6-8b66-4ef2-b22f-d319c6f57c12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47196", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo3vgwapyy23", "content": "CVE-2026-47196 - Quest Bot: Empty automod rule causes every guild message to be deleted\nCVE ID : CVE-2026-47196\n \n Published : 2026\u5e746\u670812\u65e5 11:51 | 1\u00a0\u5c0f\u65f6\uff0c31\u00a0\u5206\u949f ago\n \n Description : Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, the automod add command trims user ...", "creation_timestamp": "2026-06-12T13:57:00.812037Z"}, {"uuid": "5a858e4d-45d3-4bd0-aa2a-765fdf81a0a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47210", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo44gjbytq2w", "content": "\ud83d\udd34 CVE-2026-47210 - Critical (9.8)\n\nvm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, a sandbox escape vulnerabi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47210/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-12T16:02:04.368791Z"}, {"uuid": "c1a4b612-a06e-4ca5-b5b9-fcbe46cce25b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47691", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo4bgqtjp42j", "content": "CVE-2026-47691 - Netty has Insufficient Bailiwick Validation for NS Records\nCVE ID : CVE-2026-47691\n \n Published : June 12, 2026, 4:16 p.m. | 51\u00a0minutes ago\n \n Description : Netty is a network application framework for development of protocol servers and clients. Prior to vers...", "creation_timestamp": "2026-06-12T17:31:40.133673Z"}, {"uuid": "eff3fecd-4198-4040-b679-9bcaf910f84e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47298", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mo4dg5xw372c", "content": "\ud83d\udccc CVE-2026-47298 - Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-47298", "creation_timestamp": "2026-06-12T18:07:07.601739Z"}, {"uuid": "188ca199-0540-44cc-9cdd-d413a6dd4837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47289", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mo4lsdi3tz2m", "content": "\ud83d\udccc CVE-2026-47289 - Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-47289", "creation_timestamp": "2026-06-12T20:37:06.245181Z"}, {"uuid": "c799f7f4-a9d4-4f65-afc0-2bc83959fa68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47369", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116738725848080500", "content": "Our CTI team identified a lot of activities targeting Ubiquiti UniFi OS Server and other products (CVE-2026-47369) https://vuldb.com/vuln/370525/cti", "creation_timestamp": "2026-06-12T19:13:13.638604Z"}, {"uuid": "177317ad-8b97-4d45-b470-ab98fc13db48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47222", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo4ewnlj6f2b", "content": "CVE-2026-47222 - NanaZip: Heap out-of-bounds read in NanaZip AVB property descriptor parser via unsigned integer underflow\nCVE ID : CVE-2026-47222\n \n Published : June 12, 2026, 4:56 p.m. | 26\u00a0minutes ago\n \n Description : NanaZip is the 7-Zip derivative intended for the modern ...", "creation_timestamp": "2026-06-12T18:34:14.585844Z"}, {"uuid": "170a7840-6676-48a3-8f71-118adaa7a41c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47224", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo4frj5cbt22", "content": "CVE-2026-47224 - NanaZip: Heap buffer-overflow read in NanaZip LVM metadata CRC check\nCVE ID : CVE-2026-47224\n \n Published : June 12, 2026, 4:57 p.m. | 26\u00a0minutes ago\n \n Description : NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0....", "creation_timestamp": "2026-06-12T18:49:15.960138Z"}, {"uuid": "868389e7-e947-414c-849f-25f14ee8e4ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47653", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mo4ih2q4662l", "content": "\ud83d\udccc CVE-2026-47653 - Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-47653", "creation_timestamp": "2026-06-12T19:37:06.756732Z"}, {"uuid": "bb017722-5187-4596-ba55-ce353f1eab89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47138", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo4o75lknj2t", "content": "CVE-2026-47138 - Parse Server: Pre-authentication denial of service via client version header regex backtracking\nCVE ID : CVE-2026-47138\n \n Published : June 12, 2026, 7:16 p.m. | 1\u00a0hour, 51\u00a0minutes ago\n \n Description : Parse Server is an open source backend that can be deploye...", "creation_timestamp": "2026-06-12T21:20:06.233796Z"}, {"uuid": "bdcc108b-77e8-444c-ab9d-6406d749cf8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47263", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo4ruw2ks22t", "content": "CVE-2026-47263 - Discourse: Prevent webhook payload disclosure on event redelivery\nCVE ID : CVE-2026-47263\n \n Published : June 12, 2026, 8:26 p.m. | 57\u00a0minutes ago\n \n Description : Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1....", "creation_timestamp": "2026-06-12T22:25:55.126625Z"}, {"uuid": "68c1d05d-a981-4e1d-b81f-0001190caf65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47370", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116740837335654437", "content": "There is a new vulnerability with elevated criticality in Ubiquiti UniFi OS Server and other products (CVE-2026-47370) https://vuldb.com/vuln/370526", "creation_timestamp": "2026-06-13T04:10:12.304752Z"}, {"uuid": "99217140-e74c-40f6-a73d-844b0096c426", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47260", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo5yp7qrjp26", "content": "\ud83d\udfe0 CVE-2026-47260 - High (7.7)\n\nKoel is a free, open-source music streaming solution. Prior to version 9.3.5, Koel validates the ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47260/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-13T10:02:32.163998Z"}, {"uuid": "49babe28-0d2f-41c2-82c6-44e8ef6b3054", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47187", "type": "seen", "source": "https://bsky.app/profile/evirus.bsky.social/post/3mo734wrr2c2x", "content": "I updated sshfs to 3.7.6-bp160.1.1 on Leap 16 and all my symlinks that traversed folders on remote machines broke.  Looks like this is a deliberate change to fix CVE-2026-47187 symlink escape shenanigans.  Adding follow_symlinks after -o restores the old behavior.", "creation_timestamp": "2026-06-13T20:17:04.767870Z"}, {"uuid": "debcf559-150a-4b82-9ccb-cf7a1d84eafc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47965", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo7kywnwup2y", "content": "\ud83d\udfe0 CVE-2026-47965 - High (7.8)\n\nAcrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds w...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47965/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-14T01:00:54.240597Z"}, {"uuid": "f2d5e906-e716-4df0-a230-b40ca1316816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47691", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moa3qqf4dd26", "content": "\ud83d\udfe0 CVE-2026-47691 - High (8.7)\n\nNetty is a network application framework for development of protocol servers and clients. Prior t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47691/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-14T06:02:38.329188Z"}, {"uuid": "a866185b-e157-4ea3-8fac-6d89d1cfe522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47321", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3moaaqnqowc2p", "content": "CVE-2026-47321 \u2014 IOC Radar socradar.io/free-tools/i...", "creation_timestamp": "2026-06-14T07:29:58.086792Z"}, {"uuid": "8df0002f-d59e-4b9b-a9c5-6cc8a3ebcdf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47135", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moach3z7ag2d", "content": "\ud83d\udfe0 CVE-2026-47135 - High (8.7)\n\nvm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, Symbol.for override in set...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47135/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-14T08:00:25.324345Z"}, {"uuid": "9781a793-08d7-4afd-81f0-8d93d0c02834", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47137", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moachcwmfn2c", "content": "\ud83d\udd34 CVE-2026-47137 - Critical (10)\n\nvm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the fix for GHSA-8hg8-63c5...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47137/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-14T08:00:32.529844Z"}, {"uuid": "b65689c8-a8d0-4131-a03d-9d497490663a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47139", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moachjvqva2u", "content": "\ud83d\udfe0 CVE-2026-47139 - High (8.6)\n\nvm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, NodeVM supports excluding ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47139/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-14T08:02:44.565830Z"}, {"uuid": "33b9f8de-495a-4b5b-984a-b7e2889d3273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47140", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moafs7cl3y2d", "content": "\ud83d\udd34 CVE-2026-47140 - Critical (10)\n\nvm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, NodeVM blocks several dang...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47140/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-14T09:00:18.904620Z"}, {"uuid": "219cd98a-caa0-41a7-9766-9a14383a9887", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47208", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moafsggt2e2a", "content": "\ud83d\udd34 CVE-2026-47208 - Critical (10)\n\nvm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, VM2 suffers from a sandbox...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47208/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-14T09:00:26.338537Z"}, {"uuid": "7d2b3561-fbe8-4217-a54f-36c3e683c6d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47162", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moc3ivsjqx2n", "content": "\ud83d\udfe0 CVE-2026-47162 - High (8.8)\n\nVim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code inje...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47162/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T01:01:29.005024Z"}, {"uuid": "5b360e33-0b68-4e0d-ae2e-ce03a7918856", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47170", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moc6sreia222", "content": "\ud83d\udfe0 CVE-2026-47170 - High (7.7)\n\nGarlic-Hub manages digital signage network \u2014 devices, content, and playlists \u2014 from a single ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47170/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T02:00:41.754804Z"}, {"uuid": "5faefdf1-578c-440b-aa4f-338aa916001f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4788", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3moc76ctova2o", "content": "\ud83d\udccc CVE-2026-4788 - IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.37 stores sensitive information in log files that could be read by a local user. https://www.cyberhub.blog/cves/CVE-2026-4788", "creation_timestamp": "2026-06-15T02:07:07.843124Z"}, {"uuid": "65e49cb4-862a-4290-a7a3-ead9903be7f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47691", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3moccjm3qzg2i", "content": "\ud83d\udccc CVE-2026-47691 - Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's `D... https://www.cyberhub.blog/cves/CVE-2026-47691", "creation_timestamp": "2026-06-15T03:07:08.033556Z"}, {"uuid": "17446ce5-3043-47dd-a897-23a5ba33188a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47260", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mocjfzlzeq2j", "content": "CVE-2026-47260 - SSRF in Koel music streaming prior to 9.3.5. Episode enclosure URLs bypass validation, allowing server-side request forgery. CVSS 7.7. Update immediately. #CVE #infosec #cybersecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-47260/", "creation_timestamp": "2026-06-15T05:10:24.359737Z"}, {"uuid": "e4ca4499-1dd8-4b3f-b9cb-4bbbfba6cf7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47670", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-47670.yaml", "content": "", "creation_timestamp": "2026-06-15T06:58:24.000000Z"}, {"uuid": "20a7492a-07b3-4ab9-8573-33f09b7045ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47835", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3modacykoeu2o", "content": "\ud83d\udd17 CVE : CVE-2026-47835", "creation_timestamp": "2026-06-15T12:00:18.236419Z"}, {"uuid": "e0e2cbce-02b0-4996-9409-6306a617500b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3modi3vazfl2z", "content": "Re: Squid CVE-2026-47729 and CVE-2026-50012", "creation_timestamp": "2026-06-15T14:19:29.860131Z"}, {"uuid": "1ebf9cae-b7cf-4446-a3a3-6573705a24b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47349", "type": "seen", "source": "https://gist.github.com/alon710/14055f1ad000f884f10427da3c71afd9", "content": "# CVE-2026-47349: CVE-2026-47349: Missing Authorization in TYPO3 CMS DataHandler Record Restoration\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-06-12\n> **Full Report:** https://cvereports.com/reports/CVE-2026-47349\n\n## Summary\nAn authenticated backend user with access to the Recycler module in TYPO3 CMS can bypass write restrictions and restore soft-deleted records on pages or database tables they are not authorized to modify. This vulnerability resides in the core DataHandler class due to missing permission checks during 'undelete' operations.\n\n## TL;DR\nUnprivileged TYPO3 backend users can exploit the Recycler module to restore and modify unauthorized database records across page boundaries.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-862: Missing Authorization\n- **Attack Vector**: Network (AV:N)\n- **CVSS v4.0**: 5.3 (Medium)\n- **EPSS Score**: 0.00414 (32.77th percentile)\n- **Impact**: Privilege Escalation / Unauthorized Write Access\n- **Exploit Status**: Proof-of-Concept Available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- TYPO3 CMS 10.0.0 to 10.4.56\n- TYPO3 CMS 11.0.0 to 11.5.50\n- TYPO3 CMS 12.0.0 to 12.4.45\n- TYPO3 CMS 13.0.0 to 13.4.30\n- TYPO3 CMS 14.0.0 to 14.3.2\n- **TYPO3 CMS**: >= 10.0.0 < 10.4.57 (Fixed in: `10.4.57 ELTS`)\n- **TYPO3 CMS**: >= 11.0.0 < 11.5.51 (Fixed in: `11.5.51 ELTS`)\n- **TYPO3 CMS**: >= 12.0.0 < 12.4.46 (Fixed in: `12.4.46 ELTS`)\n- **TYPO3 CMS**: >= 13.0.0 < 13.4.31 (Fixed in: `13.4.31 LTS`)\n- **TYPO3 CMS**: >= 14.0.0 < 14.3.3 (Fixed in: `14.3.3 LTS`)\n\n## Mitigation\n\n- Upgrade TYPO3 CMS to a patched version (10.4.57, 11.5.51, 12.4.46, 13.4.31, 14.3.3 or higher).\n- Remove access to the Recycler module (ext:recycler) for non-administrative backend user groups.\n- Implement database logging audits to monitor for unauthorized database restoration commands.\n\n**Remediation Steps:**\n1. Identify the current active TYPO3 branch (10, 11, 12, 13, or 14).\n2. Apply the corresponding security update using Composer or the official source archives.\n3. Verify user group permissions to ensure low-privileged editors only possess access to designated database tables and pages.\n4. Review the TYPO3 System Log database table (sys_log) for occurrences of USER_ERROR entries regarding undelete record attempts.\n\n## References\n\n- [TYPO3 Security Advisory TYPO3-CORE-SA-2026-011](https://typo3.org/security/advisory/typo3-core-sa-2026-011)\n- [CVE Registry Record](https://www.cve.org/CVERecord?id=CVE-2026-47349)\n- [CWE-862 Weakness Definition](https://cwe.mitre.org/data/definitions/862.html)\n- [TYPO3 Core 13.4 Security Fix](https://github.com/TYPO3/typo3/commit/92f08d8944f1aeccf506fcd323c260448c64d7c8)\n- [TYPO3 Core Main Branch Security Fix](https://github.com/TYPO3/typo3/commit/9f17a307cf774d63ab8291fc97c6b55653b4265a)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-47349) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-15T14:41:47.000000Z"}, {"uuid": "b4ff61a7-11ad-4bad-95fb-b61120217230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47349", "type": "seen", "source": "https://gist.github.com/alon710/a08953cadcdf16e9be0dd04a2434d31a", "content": "# CVE-2026-47349: CVE-2026-47349: Missing Authorization in TYPO3 CMS DataHandler Record Restoration\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-06-12\n> **Full Report:** https://cvereports.com/reports/CVE-2026-47349\n\n## Summary\nAn authenticated backend user with access to the Recycler module in TYPO3 CMS can bypass write restrictions and restore soft-deleted records on pages or database tables they are not authorized to modify. This vulnerability resides in the core DataHandler class due to missing permission checks during 'undelete' operations.\n\n## TL;DR\nUnprivileged TYPO3 backend users can exploit the Recycler module to restore and modify unauthorized database records across page boundaries.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-862: Missing Authorization\n- **Attack Vector**: Network (AV:N)\n- **CVSS v4.0**: 5.3 (Medium)\n- **EPSS Score**: 0.00414 (32.77th percentile)\n- **Impact**: Privilege Escalation / Unauthorized Write Access\n- **Exploit Status**: Proof-of-Concept Available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- TYPO3 CMS 10.0.0 to 10.4.56\n- TYPO3 CMS 11.0.0 to 11.5.50\n- TYPO3 CMS 12.0.0 to 12.4.45\n- TYPO3 CMS 13.0.0 to 13.4.30\n- TYPO3 CMS 14.0.0 to 14.3.2\n- **TYPO3 CMS**: >= 10.0.0 < 10.4.57 (Fixed in: `10.4.57 ELTS`)\n- **TYPO3 CMS**: >= 11.0.0 < 11.5.51 (Fixed in: `11.5.51 ELTS`)\n- **TYPO3 CMS**: >= 12.0.0 < 12.4.46 (Fixed in: `12.4.46 ELTS`)\n- **TYPO3 CMS**: >= 13.0.0 < 13.4.31 (Fixed in: `13.4.31 LTS`)\n- **TYPO3 CMS**: >= 14.0.0 < 14.3.3 (Fixed in: `14.3.3 LTS`)\n\n## Mitigation\n\n- Upgrade TYPO3 CMS to a patched version (10.4.57, 11.5.51, 12.4.46, 13.4.31, 14.3.3 or higher).\n- Remove access to the Recycler module (ext:recycler) for non-administrative backend user groups.\n- Implement database logging audits to monitor for unauthorized database restoration commands.\n\n**Remediation Steps:**\n1. Identify the current active TYPO3 branch (10, 11, 12, 13, or 14).\n2. Apply the corresponding security update using Composer or the official source archives.\n3. Verify user group permissions to ensure low-privileged editors only possess access to designated database tables and pages.\n4. Review the TYPO3 System Log database table (sys_log) for occurrences of USER_ERROR entries regarding undelete record attempts.\n\n## References\n\n- [TYPO3 Security Advisory TYPO3-CORE-SA-2026-011](https://typo3.org/security/advisory/typo3-core-sa-2026-011)\n- [CVE Registry Record](https://www.cve.org/CVERecord?id=CVE-2026-47349)\n- [CWE-862 Weakness Definition](https://cwe.mitre.org/data/definitions/862.html)\n- [TYPO3 Core 13.4 Security Fix](https://github.com/TYPO3/typo3/commit/92f08d8944f1aeccf506fcd323c260448c64d7c8)\n- [TYPO3 Core Main Branch Security Fix](https://github.com/TYPO3/typo3/commit/9f17a307cf774d63ab8291fc97c6b55653b4265a)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-47349) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-15T14:51:47.000000Z"}, {"uuid": "f3405358-7400-48bc-9ec8-c62622861096", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3modkr2rzhx2s", "content": "\ud83d\udccc CVE-2026-47281 - Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network. https://www.cyberhub.blog/cves/CVE-2026-47281", "creation_timestamp": "2026-06-15T15:07:07.738030Z"}, {"uuid": "b65b1f3e-cc18-4f61-b351-482af7570996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47347", "type": "seen", "source": "https://gist.github.com/alon710/45b8c4a23a1b5a0fbe2279df9a787a90", "content": "# CVE-2026-47347: CVE-2026-47347: Open Redirect Vulnerability in TYPO3 CMS GeneralUtility::sanitizeLocalUrl\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-06-12\n> **Full Report:** https://cvereports.com/reports/CVE-2026-47347\n\n## Summary\nCVE-2026-47347 is an open redirect vulnerability affecting multiple TYPO3 CMS versions. The issue resides in GeneralUtility::sanitizeLocalUrl, where an insufficient blocklist validation implementation fails to prevent browsers from normalizing malformed relative paths into external protocol-relative redirections. Attackers can exploit this to conduct phishing, session hijacking, or credential harvesting campaigns.\n\n## TL;DR\nA flaw in TYPO3's GeneralUtility::sanitizeLocalUrl allows attackers to bypass local URL verification. By passing URLs with backslashes, attackers trigger modern browser normalizations, redirecting users to external malicious domains.\n\n## Technical Details\n\n- **CWE ID**: CWE-601\n- **Attack Vector**: Network (AV:N)\n- **CVSS v4.0**: 5.3 (Medium)\n- **EPSS Score**: 0.00484\n- **Exploit Status**: None (No Public Exploit)\n- **CISA KEV Status**: Not Listed\n- **Impact**: Subsequent System Integrity (SI:L)\n\n## Affected Systems\n\n- TYPO3 CMS Core\n- **TYPO3 CMS**: < 10.4.57 (Fixed in: `10.4.57 ELTS`)\n- **TYPO3 CMS**: 11.0.0 - 11.5.50 (Fixed in: `11.5.51 ELTS`)\n- **TYPO3 CMS**: 12.0.0 - 12.4.45 (Fixed in: `12.4.46 ELTS`)\n- **TYPO3 CMS**: 13.0.0 - 13.4.30 (Fixed in: `13.4.31 LTS`)\n- **TYPO3 CMS**: 14.0.0 - 14.3.2 (Fixed in: `14.3.3 LTS`)\n\n## Mitigation\n\n- Upgrade to a patched version of TYPO3 CMS Core.\n- Implement Web Application Firewall (WAF) filtering to identify and block invalid characters (such as backslashes) in redirect-associated parameter keys.\n\n**Remediation Steps:**\n1. Verify the current version of the TYPO3 CMS installation.\n2. Obtain the appropriate security update based on the current branch (e.g., 10.4.57 ELTS, 11.5.51 ELTS, 12.4.46 ELTS, 13.4.31 LTS, or 14.3.3 LTS).\n3. Apply the security update and clear TYPO3 system caches.\n4. Configure WAF rules to drop traffic containing double-backslashes or non-standard control characters in query strings targeting redirection modules.\n\n## References\n\n- [TYPO3 Security Advisory TYPO3-CORE-SA-2026-009](https://typo3.org/security/advisory/typo3-core-sa-2026-009)\n- [CVE-2026-47347 Record](https://www.cve.org/CVERecord?id=CVE-2026-47347)\n- [TYPO3 Core Commit 22c2dd5398ebc4cb7aa4aa37e02cb39181dee0cd](https://github.com/TYPO3/typo3/commit/22c2dd5398ebc4cb7aa4aa37e02cb39181dee0cd)\n- [TYPO3 Core Commit 3ffc0835012c6199db0e1dc4b56a77147d8600e0](https://github.com/TYPO3/typo3/commit/3ffc0835012c6199db0e1dc4b56a77147d8600e0)\n- [CWE-601 Definition](https://cwe.mitre.org/data/definitions/601.html)\n- [TYPO3 Security Guide](https://docs.typo3.org/typo3cms/CoreApiReference/Security/Index.html#security)\n- [TYPO3 Announce Mailing List](http://lists.typo3.org/cgi-bin/mailman/listinfo/typo3-announce)\n- [TYPO3 Review System Log](https://review.typo3.org/#/q/status:merged+project:Packages/TYPO3.CMS+topic:security,n,z)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-47347) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-15T15:11:46.000000Z"}, {"uuid": "29709c43-0bd0-4670-b76b-fa5b7515109d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47347", "type": "seen", "source": "https://gist.github.com/alon710/cac399543a2b7d81a55d66704f7b735e", "content": "# CVE-2026-47347: CVE-2026-47347: Open Redirect Vulnerability in TYPO3 CMS GeneralUtility::sanitizeLocalUrl\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-06-12\n> **Full Report:** https://cvereports.com/reports/CVE-2026-47347\n\n## Summary\nCVE-2026-47347 is an open redirect vulnerability affecting multiple TYPO3 CMS versions. The issue resides in GeneralUtility::sanitizeLocalUrl, where an insufficient blocklist validation implementation fails to prevent browsers from normalizing malformed relative paths into external protocol-relative redirections. Attackers can exploit this to conduct phishing, session hijacking, or credential harvesting campaigns.\n\n## TL;DR\nA flaw in TYPO3's GeneralUtility::sanitizeLocalUrl allows attackers to bypass local URL verification. By passing URLs with backslashes, attackers trigger modern browser normalizations, redirecting users to external malicious domains.\n\n## Technical Details\n\n- **CWE ID**: CWE-601\n- **Attack Vector**: Network (AV:N)\n- **CVSS v4.0**: 5.3 (Medium)\n- **EPSS Score**: 0.00484\n- **Exploit Status**: None (No Public Exploit)\n- **CISA KEV Status**: Not Listed\n- **Impact**: Subsequent System Integrity (SI:L)\n\n## Affected Systems\n\n- TYPO3 CMS Core\n- **TYPO3 CMS**: < 10.4.57 (Fixed in: `10.4.57 ELTS`)\n- **TYPO3 CMS**: 11.0.0 - 11.5.50 (Fixed in: `11.5.51 ELTS`)\n- **TYPO3 CMS**: 12.0.0 - 12.4.45 (Fixed in: `12.4.46 ELTS`)\n- **TYPO3 CMS**: 13.0.0 - 13.4.30 (Fixed in: `13.4.31 LTS`)\n- **TYPO3 CMS**: 14.0.0 - 14.3.2 (Fixed in: `14.3.3 LTS`)\n\n## Mitigation\n\n- Upgrade to a patched version of TYPO3 CMS Core.\n- Implement Web Application Firewall (WAF) filtering to identify and block invalid characters (such as backslashes) in redirect-associated parameter keys.\n\n**Remediation Steps:**\n1. Verify the current version of the TYPO3 CMS installation.\n2. Obtain the appropriate security update based on the current branch (e.g., 10.4.57 ELTS, 11.5.51 ELTS, 12.4.46 ELTS, 13.4.31 LTS, or 14.3.3 LTS).\n3. Apply the security update and clear TYPO3 system caches.\n4. Configure WAF rules to drop traffic containing double-backslashes or non-standard control characters in query strings targeting redirection modules.\n\n## References\n\n- [TYPO3 Security Advisory TYPO3-CORE-SA-2026-009](https://typo3.org/security/advisory/typo3-core-sa-2026-009)\n- [CVE-2026-47347 Record](https://www.cve.org/CVERecord?id=CVE-2026-47347)\n- [TYPO3 Core Commit 22c2dd5398ebc4cb7aa4aa37e02cb39181dee0cd](https://github.com/TYPO3/typo3/commit/22c2dd5398ebc4cb7aa4aa37e02cb39181dee0cd)\n- [TYPO3 Core Commit 3ffc0835012c6199db0e1dc4b56a77147d8600e0](https://github.com/TYPO3/typo3/commit/3ffc0835012c6199db0e1dc4b56a77147d8600e0)\n- [CWE-601 Definition](https://cwe.mitre.org/data/definitions/601.html)\n- [TYPO3 Security Guide](https://docs.typo3.org/typo3cms/CoreApiReference/Security/Index.html#security)\n- [TYPO3 Announce Mailing List](http://lists.typo3.org/cgi-bin/mailman/listinfo/typo3-announce)\n- [TYPO3 Review System Log](https://review.typo3.org/#/q/status:merged+project:Packages/TYPO3.CMS+topic:security,n,z)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-47347) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-15T15:21:23.000000Z"}, {"uuid": "c50b82d5-3849-4e47-b8cc-24867c591135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47930", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3modztszbkq2v", "content": "\ud83d\udccc CVE-2026-47930 - ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature byp... https://www.cyberhub.blog/cves/CVE-2026-47930", "creation_timestamp": "2026-06-15T19:37:06.761787Z"}, {"uuid": "a4ef133b-1a8b-4877-aea7-027eeee35934", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47691", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3modpjvgdrq22", "content": "\ud83d\udea8 HIGH: CVE-2026-47691\n\nCVSS 8.7/10\n\n\ud83d\udccb WHAT IT IS:\nNetty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's `DnsResolveContext` insufficiently validates the bailiwick of NS records, enabling DNS Cache Poisonin", "creation_timestamp": "2026-06-15T16:32:35.812586Z"}, {"uuid": "5480576e-2427-4972-995c-7c005101f3e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47928", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3modprwqotv2m", "content": "\ud83d\udccc CVE-2026-47928 - ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code executi... https://www.cyberhub.blog/cves/CVE-2026-47928", "creation_timestamp": "2026-06-15T16:37:06.337935Z"}, {"uuid": "8f21090d-c6a1-4b6f-aed4-85ab9fd84804", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47932", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3modrhn7ltg2m", "content": "\ud83d\udccc CVE-2026-47932 - ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vuln... https://www.cyberhub.blog/cves/CVE-2026-47932", "creation_timestamp": "2026-06-15T17:07:07.887651Z"}, {"uuid": "f3585b11-466b-4f01-b2cc-9bf21b59059f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47931", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3modt5achzm2t", "content": "\ud83d\udccc CVE-2026-47931 - ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code executi... https://www.cyberhub.blog/cves/CVE-2026-47931", "creation_timestamp": "2026-06-15T17:37:06.173902Z"}, {"uuid": "1f5cb8cb-4b75-44ce-b847-bdeca6d888e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47929", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3modwikzt6c27", "content": "\ud83d\udccc CVE-2026-47929 - ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution... https://www.cyberhub.blog/cves/CVE-2026-47929", "creation_timestamp": "2026-06-15T18:37:07.801755Z"}, {"uuid": "d7f02be5-57c5-4c95-aafe-f87499471083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47777", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3modxs6jdlo22", "content": "\ud83d\udfe0 CVE-2026-47777 - High (7.5)\n\nMastodon is a free, open-source social network server based on ActivityPub. In versions there is ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47777/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T19:00:26.137744Z"}, {"uuid": "111a3698-f046-4004-ba2e-3d6cade87ee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47835", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moe3ofsskn2x", "content": "CVE-2026-47835 - Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores\nCVE ID : CVE-2026-47835\n \n Published : June 15, 2026, 6:54 p.m. | 47\u00a0minutes ago\n \n Description : In Spring AI Vector Stores, special...", "creation_timestamp": "2026-06-15T20:09:52.430808Z"}, {"uuid": "bd2e9285-138b-4aad-9771-1c97c468d4cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47631", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3moe573uizj2o", "content": "\ud83d\udccc CVE-2026-47631 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to p... https://www.cyberhub.blog/cves/CVE-2026-47631", "creation_timestamp": "2026-06-15T20:37:07.017408Z"}, {"uuid": "9399cf82-f8b2-476b-8804-c7cb0ab2eeb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47777", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3moe62iy6dh2h", "content": "Mastodon 4.6.0-beta.1\u672a\u6e80\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u3001\u30ea\u30e2\u30fc\u30c8\u30a2\u30ab\u30a6\u30f3\u30c8\u304c\u30b3\u30ec\u30af\u30b7\u30e7\u30f3\u3078\u306e\u63b2\u8f09\u3092\u627f\u8a8d\u3057\u305f\u304b\u3069\u3046\u304b\u306e\u30c1\u30a7\u30c3\u30af\u306b\u4e0d\u5099\u304c\u3042\u308b\u3002\u653b\u6483\u8005\u306f\u627f\u8a8d\u3092\u507d\u9020\u3057\u3001\u5b9f\u969b\u306b\u306f\u8a31\u53ef\u3055\u308c\u3066\u3044\u306a\u3044\u30a2\u30ab\u30a6\u30f3\u2026\nCVE-2026-47777 CVSS 7.5 | HIGH", "creation_timestamp": "2026-06-15T20:52:25.726105Z"}, {"uuid": "43629dab-56d5-4ec0-8981-ebff06d2ff9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47774", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116756431947326945", "content": "It is possible to see elevated activities targeting Envoy (CVE-2026-47774) https://vuldb.com/vuln/370872/cti", "creation_timestamp": "2026-06-15T22:16:08.098026Z"}, {"uuid": "1830a109-dd87-4778-956d-9688fa0396b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/canartuc.com/post/3moeii64hu42s", "content": "Squid 7.6 fixes CVE-2026-47729, an OOB read in the FTP gateway that a hostile upstream FTP server can trigger, plus CVE-2026-50012, a heap overflow in cache digests when built with --enable-cache-digests. Two memory bugs at the proxy edge. Do you still need FTP gatewaying enabled at all?\n#security", "creation_timestamp": "2026-06-15T23:59:01.793449Z"}, {"uuid": "6dcd3965-0b44-4e34-93d8-d98a7977ceca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47349", "type": "seen", "source": "https://gist.github.com/alon710/e90462c6d1e4f356cd2d8abf8f54484f", "content": "# CVE-2026-47349: CVE-2026-47349: Missing Authorization in TYPO3 CMS DataHandler Record Restoration\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-06-12\n> **Full Report:** https://cvereports.com/reports/CVE-2026-47349\n\n## Summary\nAn authenticated backend user with access to the Recycler module in TYPO3 CMS can bypass write restrictions and restore soft-deleted records on pages or database tables they are not authorized to modify. This vulnerability resides in the core DataHandler class due to missing permission checks during 'undelete' operations.\n\n## TL;DR\nUnprivileged TYPO3 backend users can exploit the Recycler module to restore and modify unauthorized database records across page boundaries.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-862: Missing Authorization\n- **Attack Vector**: Network (AV:N)\n- **CVSS v4.0**: 5.3 (Medium)\n- **EPSS Score**: 0.00414 (32.77th percentile)\n- **Impact**: Privilege Escalation / Unauthorized Write Access\n- **Exploit Status**: Proof-of-Concept Available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- TYPO3 CMS 10.0.0 to 10.4.56\n- TYPO3 CMS 11.0.0 to 11.5.50\n- TYPO3 CMS 12.0.0 to 12.4.45\n- TYPO3 CMS 13.0.0 to 13.4.30\n- TYPO3 CMS 14.0.0 to 14.3.2\n- **TYPO3 CMS**: >= 10.0.0 < 10.4.57 (Fixed in: `10.4.57 ELTS`)\n- **TYPO3 CMS**: >= 11.0.0 < 11.5.51 (Fixed in: `11.5.51 ELTS`)\n- **TYPO3 CMS**: >= 12.0.0 < 12.4.46 (Fixed in: `12.4.46 ELTS`)\n- **TYPO3 CMS**: >= 13.0.0 < 13.4.31 (Fixed in: `13.4.31 LTS`)\n- **TYPO3 CMS**: >= 14.0.0 < 14.3.3 (Fixed in: `14.3.3 LTS`)\n\n## Mitigation\n\n- Upgrade TYPO3 CMS to a patched version (10.4.57, 11.5.51, 12.4.46, 13.4.31, 14.3.3 or higher).\n- Remove access to the Recycler module (ext:recycler) for non-administrative backend user groups.\n- Implement database logging audits to monitor for unauthorized database restoration commands.\n\n**Remediation Steps:**\n1. Identify the current active TYPO3 branch (10, 11, 12, 13, or 14).\n2. Apply the corresponding security update using Composer or the official source archives.\n3. Verify user group permissions to ensure low-privileged editors only possess access to designated database tables and pages.\n4. Review the TYPO3 System Log database table (sys_log) for occurrences of USER_ERROR entries regarding undelete record attempts.\n\n## References\n\n- [TYPO3 Security Advisory TYPO3-CORE-SA-2026-011](https://typo3.org/security/advisory/typo3-core-sa-2026-011)\n- [CVE Registry Record](https://www.cve.org/CVERecord?id=CVE-2026-47349)\n- [CWE-862 Weakness Definition](https://cwe.mitre.org/data/definitions/862.html)\n- [TYPO3 Core 13.4 Security Fix](https://github.com/TYPO3/typo3/commit/92f08d8944f1aeccf506fcd323c260448c64d7c8)\n- [TYPO3 Core Main Branch Security Fix](https://github.com/TYPO3/typo3/commit/9f17a307cf774d63ab8291fc97c6b55653b4265a)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-47349) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-16T00:11:50.000000Z"}, {"uuid": "4f1b12fa-bea0-4cb1-9cca-955abb2307d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47627", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtf4uzmqjm24", "content": "CVE-2026-47627 - triton inference server\nAn attacker can cause NVIDIA Triton Inference Server on Linux to crash, making it unavailable. This affects servers running NVIDIA Triton Inference Server. To protect your\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nvidia #CVE #infosec", "creation_timestamp": "2026-08-18T21:10:05.953446Z"}, {"uuid": "ccaf3ac9-2175-4097-bd43-5d45b10fc143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47391", "type": "seen", "source": "MISP/d511a704-eba2-411a-9543-41e0e130f522", "content": "", "creation_timestamp": "2026-06-15T17:02:34.000000Z"}, {"uuid": "c0174329-f368-4325-8b62-fe0f9137a107", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47684", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mog676uy2v2c", "content": "\ud83d\udfe0 CVE-2026-47684 - High (7.7)\n\nSync-in Server is a secure, open-source platform for file storage, sharing, collaboration, and sy...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47684/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T16:00:23.378364Z"}, {"uuid": "35a0a316-5a12-4b8b-99f8-fdb9885e5325", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47291", "type": "seen", "source": "https://bsky.app/profile/lasenal.bsky.social/post/3mogoxgx6lk2p", "content": "Microsoft parchea 206 fallos: r\u00e9cord de Patch Tuesday con 3 zero-days\n\nEl update de junio trae 39 parches cr\u00edticos. Destaca un RCE en HTTP.sys (CVE-2026-47291, CVSS 9.8): ejecuci\u00f3n remota sin login como SYSTEM. Actualiza ya.\n\nLeer en The Hacker News \u2192\n\n#LaSe\u00f1alNews #Ciberseguridad #InfoSec", "creation_timestamp": "2026-06-16T21:00:16.630024Z"}, {"uuid": "f3b6263b-e762-4528-9897-1168c43994a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47747", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mogoxrzpyb24", "content": "\ud83d\udfe0 CVE-2026-47747 - High (7.8)\n\nstable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux,...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47747/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T21:00:28.608761Z"}, {"uuid": "fdd5d2f9-c8bc-4e0d-b77e-950c34fc29e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47750", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mogoxzeqmt27", "content": "\ud83d\udfe0 CVE-2026-47750 - High (7.8)\n\nstable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux,...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47750/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T21:00:36.318143Z"}, {"uuid": "5db8a355-febb-4d83-9c8d-37e0226c76b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47277", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mogzghhrvn2v", "content": "CVE-2026-47277 - Runtipi: Unauthenticated arbitrary file read through app-store logo symlinks\nCVE ID : CVE-2026-47277\n \n Published : June 16, 2026, 9:43 p.m. | 1\u00a0hour, 49\u00a0minutes ago\n \n Description : Runtipi is a personal homeserver orchestrator. In versions 4.9.1 through 4.9....", "creation_timestamp": "2026-06-17T00:07:37.380073Z"}, {"uuid": "3fff0913-dd5e-42de-98e1-fd120e49aa48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47964", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moh7r44us52u", "content": "\ud83d\udfe0 CVE-2026-47964 - High (7.8)\n\nDNG SDK versions 1.7.1 2536 and earlier are affected by a Heap-based Buffer Overflow vulnerabilit...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47964/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-17T02:00:57.958983Z"}, {"uuid": "f0d28637-8bd5-42f1-8387-24a3e157a13f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mohbcixrys25", "content": "\u30d7\u30ed\u30ad\u30b7\u30b5\u30fc\u30d0\u30fcSquid \u304cFTP\u30b2\u30fc\u30c8\u30a6\u30a7\u30a4\u306e\u5883\u754c\u5916\u8aad\u307f\u53d6\u308a\uff08CVE-2026-47729\uff09\u3068cache_digest\u306e\u30d2\u30fc\u30d7\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\uff08CVE-2026-50012\uff09\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews", "creation_timestamp": "2026-06-17T02:28:38.496165Z"}, {"uuid": "c3f5b888-f4d4-4629-9b5a-bc0b0ea16fea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47340", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mohcfge3hx2k", "content": "CVE-2026-47340: Apache DolphinScheduler: An incorrect authorization vulnerability allows authenticated users to access alert instances associated with alert groups they do not have permission to access.", "creation_timestamp": "2026-06-17T02:48:06.972895Z"}, {"uuid": "d259ab99-121d-48f1-8fa1-81d68cd5a4a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47749", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mohd3rjm6m2t", "content": "\ud83d\udfe0 CVE-2026-47749 - High (7.8)\n\nstable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux,...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47749/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-17T03:00:37.199238Z"}, {"uuid": "6359581d-f7b7-407c-88a8-eb59b9353d90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47103", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3moimysp6w224", "content": "Critical RCE in fgmacedo python-statemachine (3.0.0 \u2013 <3.2.0)! Unsafe eval in SCXML allows code execution. Avoid untrusted SCXML, monitor for patches. Details: https://radar.offseq.com/threat/cve-2026-47103-improper-neutralization-of-directiv-73074fb6af41b907 #OffSeq #Python #Security", "creation_timestamp": "2026-06-17T15:30:34.617480Z"}, {"uuid": "b6303d6e-5782-4997-b472-f294ae25ced5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47103", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3moiooixiwo2r", "content": "Critical RCE in python-statemachine (3.0.0 \u2013 <3.2.0): attacker-supplied SCXML can trigger unsanitized eval(). Avoid untrusted SCXML and watch for patch info: https://radar.offseq.com/threat/cve-2026-47103-improper-neutralization-of-directiv-73074fb6af41b907 #OffSeq #python #security", "creation_timestamp": "2026-06-17T16:00:40.565976Z"}, {"uuid": "24ff4db0-7efa-4ab8-a348-68d9d9f2ea76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47103", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moivs7gmrq27", "content": "CVE-2026-47103 - Python StateMachine 3.0.0\nCVE ID : CVE-2026-47103\n \n Published : June 17, 2026, 2:32 p.m. | 2\u00a0hours, 36\u00a0minutes ago\n \n Description : Python StateMachine versions 3.0.0 before 3.2.0 contains a remote code execution vulnerability that allows attackers to execute...", "creation_timestamp": "2026-06-17T18:07:59.323651Z"}, {"uuid": "d9a98b58-a3dd-4b27-9a90-55d8a78c9e54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47280", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3moj7lms3he24", "content": "\ud83d\udea8 HIGH: CVE-2026-47280\n\nCVSS 10.0/10\n\n\ud83d\udccb WHAT IT IS:\nImproper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a network.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Azure Resource Manager\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack: unknown vector\nImpact: varies\n\n\u2705 WHAT TO DO:", "creation_timestamp": "2026-06-17T21:03:12.409342Z"}, {"uuid": "a793c67a-64f4-4d73-b0a6-8ca4dcb3910f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47103", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mok45esats25", "content": "the wild. Immediate patching and access control review recommended.\n[Source: @offseq@infosec.exchange](https://infosec.exchange/@offseq/116758965574886024)\n\n## 3. \ud83d\udea8 CRITICAL: CVE-2026-47103 \u2014 python-statemachine eval() RCE (CVSS 9.3)\nAn unsanitized `eval()` in SCXML processing lets attackers", "creation_timestamp": "2026-06-18T05:34:13.540101Z"}, {"uuid": "3defa3f3-0fa0-4aa5-9521-eaa91d3bae80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47103", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mokymjnfot2q", "content": "zero-day is actively exploited in the wild. Immediate patching and access control review recommended.\n[Source: @offseq@infosec.exchange](https://infosec.exchange/@offseq/116758965574886024)\n\n## 3. \ud83d\udea8 CRITICAL: CVE-2026-47103 \u2014 python-statemachine eval() RCE (CVSS 9.3)\nAn", "creation_timestamp": "2026-06-18T14:03:46.003340Z"}, {"uuid": "d8709cf4-fd5e-4294-afa1-76ed82df5aeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47717", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-47717.yaml", "content": "", "creation_timestamp": "2026-06-18T02:57:08.000000Z"}, {"uuid": "26490883-df7d-40e3-aa96-6fde93703e71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47103", "type": "published-proof-of-concept", "source": "https://github.com/fgmacedo/python-statemachine/security/advisories/GHSA-v4jc-pm6r-3vj8", "content": "", "creation_timestamp": "2026-06-17T11:39:45.000000Z"}, {"uuid": "692684c8-5f91-4df5-933b-a9f5b3f8727c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47370", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-nei-prodotti-ubiquiti", "content": "", "creation_timestamp": "2026-06-18T06:25:42.000000Z"}, {"uuid": "d58a4c23-5aa2-4a67-adfb-8e24a5c2f386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47367", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-nei-prodotti-ubiquiti", "content": "", "creation_timestamp": "2026-06-18T06:25:42.000000Z"}, {"uuid": "cbf17d54-1957-4e35-80cb-dc4f343f34e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47369", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-nei-prodotti-ubiquiti", "content": "", "creation_timestamp": "2026-06-18T06:25:42.000000Z"}, {"uuid": "423aedf3-5c77-4a46-a36d-4f9db8bed691", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47368", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-nei-prodotti-ubiquiti", "content": "", "creation_timestamp": "2026-06-18T06:25:42.000000Z"}, {"uuid": "7a3c02dc-eb49-4730-8eaf-00810212209e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47846", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116772884543424032", "content": "Bitnami Cassandra container images (4.0.0, 4.1.0, 5.0.0) have a CRITICAL flaw (CVE-2026-47846): default cassandra:cassandra superuser may remain after custom admin setup. Update urgently! https://radar.offseq.com/threat/cve-2026-47846-cwe-798-use-of-hard-coded-credentia-ebcf63185c71b6d0 #OffSeq #Cassandra #Vuln #CloudSecurity", "creation_timestamp": "2026-06-18T20:00:20.934807Z"}, {"uuid": "c4ec88bf-30cc-445e-bf0b-b21e8493b171", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47846", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3molmjyhows26", "content": "Bitnami Cassandra containers 4.0.0, 4.1.0, 5.0.0 impacted by CRITICAL vulnerability: default superuser may stay active after custom admin config. Update images ASAP! https://radar.offseq.com/threat/cve-2026-47846-cwe-798-use-of-hard-coded-credentia-ebcf63185c71b6d0 #OffSeq #Cassandra #CloudSecurity", "creation_timestamp": "2026-06-18T20:00:22.087838Z"}, {"uuid": "393c44fb-9cb5-4a42-9950-22c068a5932d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47846", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3molr76okq52w", "content": "CVE-2026-47846 - Bitnami Cassandra Default Superuser Vulnerability\nCVE ID : CVE-2026-47846\n \n Published : June 18, 2026, 6:39 p.m. | 2\u00a0hours, 29\u00a0minutes ago\n \n Description : Bitnami Cassandra container images are affected by a retained default superuser vulnerability. When a c...", "creation_timestamp": "2026-06-18T21:23:42.249093Z"}, {"uuid": "8df243a3-6ed0-49b9-b7da-9a8fd6f1c7ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47729", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3moltaqqmko2s", "content": "\ud83d\udce2 Squidbleed (CVE-2026-47729) : fuite m\u00e9moire de type Heartbleed dans Squid Proxy depuis 1997\n\ud83d\udcdd ## \ud83d\udd0d Contexte\n\nPubli\u00e9 le 18 juin 2026 par Cal\u2026\nhttps://cyberveille.ch/posts/2026-06-18-squidbleed-cve-2026-47729-fuite-memoire-de-type-heartbleed-dans-squid-proxy-depuis-1997/ #CVE_2026_47729 #Cyberveille", "creation_timestamp": "2026-06-18T22:00:24.580763Z"}, {"uuid": "75c1cea3-c094-475b-b43c-aebc006c6d4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47647", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3molwm435hu2l", "content": "Microsoft Dynamics 365 hit by CRITICAL vulnerability (CVE-2026-47647, CVSS 9.9) enabling privilege escalation. Microsoft has issued a cloud-side fix \u2014 confirm your instance is up-to-date: https://radar.offseq.com/threat/cve-2026-47647-cwe-284-improper-access-control-in--2000e43e6c3db613 #OffSeq #...", "creation_timestamp": "2026-06-18T23:00:25.405985Z"}, {"uuid": "9067607a-489d-47c6-91f4-744b2aeaf1c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47647", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116773592895899835", "content": "CVE-2026-47647 (CRITICAL, CVSS 9.9) affects Microsoft Dynamics 365: improper access control lets authorized users escalate privileges over the network. Fix applied by Microsoft server-side \u2014 admins should confirm updates. Details: https://radar.offseq.com/threat/cve-2026-47647-cwe-284-improper-access-control-in--2000e43e6c3db613 #OffSeq #Microsoft #Infosec #CVE", "creation_timestamp": "2026-06-18T23:00:25.528366Z"}, {"uuid": "62e7c87f-0333-4d0a-a550-3fac452dfe6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47647", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mom6xudcjq2r", "content": "CVE-2026-47647 - Dynamics 365 Elevation of Privilege Vulnerability\nCVE ID : CVE-2026-47647\n \n Published : June 18, 2026, 9:42 p.m. | 1\u00a0hour, 49\u00a0minutes ago\n \n Description : None\n \n Severity: 9.9 | CRITICAL\n \n Visit the link for more details, such as CVSS details, affected prod...", "creation_timestamp": "2026-06-19T01:30:08.551599Z"}, {"uuid": "24357803-7a22-4af2-9571-611c28ea062c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mom6yzwqbv2l", "content": "Re: Squid CVE-2026-47729 and CVE-2026-50012", "creation_timestamp": "2026-06-19T01:30:47.940704Z"}, {"uuid": "37407ab8-3176-45da-9137-a76edb4dc679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47262", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mom72udh7u25", "content": "[containerd] Patch releases addressing CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, and CVE-2026-47262", "creation_timestamp": "2026-06-19T01:31:49.859338Z"}, {"uuid": "97d0141a-6a01-4148-8c30-c21cd56a5bb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3momarskqah27", "content": "\ud83d\udd12 Squidbleed (CVE-2026-47729)\n\nA critical vulnerability dubbed Squidbleed (CVE-2026-47729) has been found in Squid Proxy, affecting all versions since 1997 in their default configur...\n\nhttps://tinyurl.com/2bcslopz #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-06-19T02:02:33.273131Z"}, {"uuid": "1aecbd16-99a4-4738-8217-80ddd3915609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47633", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116775245576207551", "content": "Microsoft Cost Management is affected by CVE-2026-47633 (HIGH, CVSS 7.5) \u2014 remote attackers can access sensitive info with no auth or user interaction. Patch available: https://radar.offseq.com/threat/cve-2026-47633-cwe-200-exposure-of-sensitive-infor-9882c245b9fe08eb #OffSeq #Microsoft #CVE #BlueTeam", "creation_timestamp": "2026-06-19T06:00:41.268115Z"}, {"uuid": "40b859fa-2956-40a2-b769-fa2aa24a01a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47633", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3momo3nowoe2c", "content": "HIGH-severity CVE-2026-47633 impacts Microsoft Cost Management: remote, unauthenticated disclosure of sensitive data possible. Apply Microsoft\u2019s official fix ASAP. https://radar.offseq.com/threat/cve-2026-47633-cwe-200-exposure-of-sensitive-infor-9882c245b9fe08eb #OffSeq #Microsoft #Vuln", "creation_timestamp": "2026-06-19T06:00:42.875140Z"}, {"uuid": "70ffff1a-3271-4119-9a47-48c9d5cfb966", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47429", "type": "published-proof-of-concept", "source": "Telegram/cFkqaiLeMF7rcnyy-4alEvGOnwxzqn60V0GjpreyOt3-Yxw", "content": "", "creation_timestamp": "2026-06-09T11:00:07.000000Z"}, {"uuid": "fd906c9c-908f-45de-995f-5e47ba48b06e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47291", "type": "published-proof-of-concept", "source": "Telegram/J0ROb3WeJ6WKiYfRh6IAWg81KdEB4nYWqw_XCSrqEYFegis", "content": "", "creation_timestamp": "2026-06-11T03:00:06.000000Z"}, {"uuid": "1f500115-4711-4c9b-a6c4-afb6d775bd16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mon4zwmzh42o", "content": "Squidbleed (CVE-2026-47729) - Heartbleed-style vulnerability that leaks internal memory from every version of Squid Proxy, in its default configuration", "creation_timestamp": "2026-06-19T10:28:11.353095Z"}, {"uuid": "40f3d94e-dcce-416c-a0d2-0af9abe375ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mon5obgu5z2s", "content": "Squidbleed (CVE-2026-47729) - Heartbleed-style vulnerability that leaks internal memory from every version of Squid Proxy, in its default configuration", "creation_timestamp": "2026-06-19T10:39:40.087538Z"}, {"uuid": "d194c150-27ec-4868-beeb-856d2326aa94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116776381674232979", "content": "Some increased actor activities are shown targeting squid-cache Squid (CVE-2026-47729) https://vuldb.com/vuln/370669/cti", "creation_timestamp": "2026-06-19T10:49:35.948598Z"}, {"uuid": "6b1cec1b-4e7a-43b7-91fe-49f2d26c44bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47717", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mswdmtcz2d27", "content": "\ud83d\udfe0 CVE-2026-47717 - High (7.5)\n\nFUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. In fuxa-server version ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47717/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-13T00:00:51.902211Z"}, {"uuid": "9cf9fb80-9574-4c51-8fc8-d1ed6c214ea7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47339", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3monoln2vtt2k", "content": "CVE-2026-47339: Apache APISIX: authz-casdoor incorrect session sharing", "creation_timestamp": "2026-06-19T15:42:17.966461Z"}, {"uuid": "b4fa1eb3-0520-42ed-942e-39d3a2647b1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47341", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3monp5jz3us2y", "content": "CVE-2026-47341: Apache APISIX: Session replay issue in hmac-auth", "creation_timestamp": "2026-06-19T15:52:18.658712Z"}, {"uuid": "1ddf8307-64ef-4663-964a-080a6e0ff0c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47211", "type": "seen", "source": "https://gist.github.com/alon710/27a1a02d7c391b1b2590b0cf7da6fc5e", "content": "# GHSA-JV2H-4P9V-WF5W: GHSA-JV2H-4P9V-WF5W: Arbitrary Remote Code Execution via Incomplete Environment Denylist in Ouroboros AI\n\n> **CVSS Score:** 8.8\n> **Published:** 2026-06-19\n> **Full Report:** https://cvereports.com/reports/GHSA-JV2H-4P9V-WF5W\n\n## Summary\nAn arbitrary Remote Code Execution (RCE) vulnerability exists in ouroboros-ai due to an incomplete fix for CVE-2026-47211. Ouroboros automatically loads environment configurations from local .env files located in the current working directory (CWD) of cloned repositories. Although a denylist (_UNTRUSTED_ENV_DENYLIST) was introduced in version 0.39.0 to filter out execution-routing environment variables, multiple critical configuration variables were omitted, enabling complete sandbox bypass and arbitrary system command execution.\n\n## TL;DR\nOuroboros AI is vulnerable to arbitrary remote code execution via untrusted environment variables and working directory configurations, allowing attackers to run arbitrary system commands by getting a user to execute Ouroboros inside a cloned repository.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **Vulnerability Type**: CWE-426: Untrusted Search Path / CWE-15: External Control of System Configuration\n- **Affected Component**: Environment Staging & MCP Bridge Configuration\n- **Attack Vector**: Network / File system parsing\n- **Exploit Status**: Proof of Concept (PoC) available\n- **Impact**: Remote Code Execution (RCE)\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Ouroboros AI systems utilizing command-line runtimes and local directory loading.\n- **ouroboros-ai**: < 0.42.1 (Fixed in: `0.42.1`)\n\n## Mitigation\n\n- Update ouroboros-ai to version 0.42.1 or newer.\n- Avoid running Ouroboros commands inside untrusted workspace directories.\n- Implement environment-level locks to ignore local .env variables in sensitive workspaces.\n\n**Remediation Steps:**\n1. Check the installed version of ouroboros-ai using pip: `pip show ouroboros-ai`.\n2. Upgrade the dependency package: `pip install --upgrade ouroboros-ai>=0.42.1`.\n3. Remove manual .env files from current working directories before invoking command-line tooling.\n\n## References\n\n- [GitHub Security Advisory GHSA-jv2h-4p9v-wf5w](https://github.com/Q00/ouroboros/security/advisories/GHSA-jv2h-4p9v-wf5w)\n- [Ouroboros Source Repository](https://github.com/Q00/ouroboros)\n- [Fix Pull Request 1078](https://github.com/Q00/ouroboros/pull/1078)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/GHSA-JV2H-4P9V-WF5W) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-19T16:11:36.000000Z"}, {"uuid": "46ade080-ddfc-49b6-a5e3-d15819f3384a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47717", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mswfpsyk5m2w", "content": "One Web HMI Bug, One More Shrine to Delayed Industrial Panic\nPANIC 66% | Lag 0.0h | FUXA fuxa-server has a high-severity vulnerability tracked as CVE-2026-47717, and GrayZone is report\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-13T00:38:19.411747Z"}, {"uuid": "fda3d028-f1dd-4322-927c-0c545cf1c1d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47203", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mooe3rdbmq2a", "content": "CVE-2026-47203 - Authelia Missing Username Canonicalization in Basic Auth (LDAP)\nCVE ID : CVE-2026-47203\n \n Published : June 19, 2026, 8:19 p.m. | 1\u00a0hour, 23\u00a0minutes ago\n \n Description : Authelia is an open-source authentication and authorization server providing two-factor au...", "creation_timestamp": "2026-06-19T22:07:08.161511Z"}, {"uuid": "4dc3a456-04c8-4f6a-87db-7a199313b27b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47645", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moof6vfqd62e", "content": "CVE-2026-47645 - Microsoft 365 Copilot's Business Chat Elevation of Privilege Vulnerability\nCVE ID : CVE-2026-47645\n \n Published : June 19, 2026, 8:29 p.m. | 1\u00a0hour, 13\u00a0minutes ago\n \n Description : None\n \n Severity: 8.8 | HIGH\n \n Visit the link for more details, such as CVSS d...", "creation_timestamp": "2026-06-19T22:26:46.529305Z"}, {"uuid": "0aaf641c-0ead-4799-bf5d-4754f0834e89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47645", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3moohax4noi2c", "content": "CVE-2026-47645 - Open redirect in Microsoft 365 Copilot. CVSS 8.8. Privilege escalation via untrusted URL redirection. No patch available. Monitor activity and restrict access. #CVE #Microsoft #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-47645/", "creation_timestamp": "2026-06-19T23:03:43.356935Z"}, {"uuid": "346e923e-261c-4f51-8290-8468d334f191", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3moostal2o52d", "content": "Top 3 CVE for last 7 days:\nCVE-2026-50656: 26 interactions\nCVE-2026-54420: 26 interactions\nCVE-2026-20262: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-20253: 6 interactions\nCVE-2026-47729: 5 interactions\nCVE-2026-8713: 4 interactions\n", "creation_timestamp": "2026-06-20T02:30:48.678078Z"}, {"uuid": "53beb7e6-d765-4eb2-b3d8-dcb696663de1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47846", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mop3h23ozd27", "content": "CVE-2026-47846 - Critical supply chain attack in Bitnami Cassandra containers. Default superuser cassandra:cassandra retained after custom admin setup. CVSS 9.8. Update all affected images immediately. #CVE #Bitnami #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-47846/", "creation_timestamp": "2026-06-20T05:05:03.867571Z"}, {"uuid": "203f5d8c-c19e-4a5d-8187-063c1522c6e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mopqnnblgt2z", "content": "Squidbleed (CVE-2026-47729)", "creation_timestamp": "2026-06-20T11:24:36.537820Z"}, {"uuid": "c9d66ce8-4d37-4db9-8068-527db7fc38c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47928", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mopqzuare52w", "content": "\ud83d\udea8 CRITICAL ALERT: CVE-2026-47928\n\nCVSS 9.6/10\n\n\ud83d\udccb WHAT IT IS:\nColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user i", "creation_timestamp": "2026-06-20T11:31:22.295345Z"}, {"uuid": "04e6de06-da1a-439c-b8ce-eb39f1b2f4c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47929", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mopr23aums2y", "content": "\ud83d\udea8 HIGH ALERT: CVE-2026-47929\n\nCVSS 8.4/10\n\n\ud83d\udccb WHAT IT IS:\nColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could exploit this vulnerabil", "creation_timestamp": "2026-06-20T11:31:29.518914Z"}, {"uuid": "98a75ba7-a3f9-4ced-9a92-e937b9f3f23f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47782", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mopxjjpav22s", "content": "Android\u7248\u300c\u30ed\u30dc\u30d5\u30a9\u30fc\u30e0\u300d\u306b\u8106\u5f31\u6027 - \u610f\u56f3\u3057\u306a\u3044\u30d5\u30a1\u30a4\u30ebDL\u306e\u304a\u305d\u308c\n\nSiber Systems\u304c\u63d0\u4f9b\u3059\u308b\u30d1\u30b9\u30ef\u30fc\u30c9\u7ba1\u7406\u30a2\u30d7\u30ea\u300c\u30d1\u30b9\u30ef\u30fc\u30c9\u7ba1\u7406 \u30ed\u30dc\u30d5\u30a9\u30fc\u30e0\u300d\u306eAndroid\u7248\u306b\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\n\nAndroid\u5185\u90e8\u3067\u30a2\u30d7\u30ea\u540c\u58eb\u3067\u9023\u643a\u3059\u308b\u300cintent\u300d\u51e6\u7406\u306b\u8106\u5f31\u6027\u300cCVE-2026-47782\u300d\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3082\u306e\u3002\n\n\u540c\u6a5f\u80fd\u7d4c\u7531\u3067\u30ed\u30b0\u30a4\u30f3\u30da\u30fc\u30b8\u306a\u3069\u306eURL\u3092\u53d7\u3051\u53d6\u308a\u3001\u30a2\u30d7\u30ea\u5185\u8535\u30d6\u30e9\u30a6\u30b6\u3067\u958b\u304f\u969b\u3001\u5341\u5206\u306b\u691c\u8a3c\u3092\u884c\u3063\u3066\u304a\u3089\u305a\u3001\u5229\u7528\u8005\u3078\u78ba\u8a8d\u3092\u53d6\u308b\u3053\u3068\u306a\u304f\u30d5\u30a1\u30a4\u30eb\u304c\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002", "creation_timestamp": "2026-06-20T13:27:31.688397Z"}, {"uuid": "90e192de-9e1f-4c01-bac0-c11f6a2836e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47643", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3moqpjopsb72t", "content": "\ud83d\udccc CVE-2026-47643 - External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-47643", "creation_timestamp": "2026-06-20T20:37:05.639164Z"}, {"uuid": "5d36ee7c-859e-4378-8506-25b1da9c7c86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mosuldjvcd2m", "content": "Microsoft Defender $MSFT can be turned against the PC it guards. RoguePlanet (CVE-2026-47281) lets a local attacker seize full SYSTEM control on Windows 10 and 11, even fully patched ones. Microsoft left it unpatched in June, and BleepingComputer reports a working exploit is public.", "creation_timestamp": "2026-06-21T17:13:06.767433Z"}, {"uuid": "c4841082-ebc6-439a-98e5-a23f8ba6bd61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47162", "type": "seen", "source": "https://bsky.app/profile/canartuc.com/post/3motgzrwjm222", "content": "Vim patched two code-injection issues in bundled plugins: CVE-2026-47162 in netrw (fixed 9.2.0495) and a PowerShell command injection in zip.vim via crafted archive entry names (fixed 9.2.0678). These ship with stock Vim, no extra install needed. Do you track Vim's own version for CVEs?\n#Vim", "creation_timestamp": "2026-06-21T22:43:05.120061Z"}, {"uuid": "a66004b8-49f2-4663-95aa-ee331b4f1280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47929", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motmllnjbr2y", "content": "\ud83d\udea8  ALERT: CVE-2026-47929\n\nCVSS 8.4/10\n\n\ud83d\udccb WHAT IT IS:\nColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could exploit this vulnerability ", "creation_timestamp": "2026-06-22T00:22:27.240224Z"}, {"uuid": "1da64fe2-a43d-48c4-9636-f0052a2b4c04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47931", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motmlsckbr2m", "content": "\ud83d\udea8  ALERT: CVE-2026-47931\n\nCVSS 8.4/10\n\n\ud83d\udccb WHAT IT IS:\nColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interacti", "creation_timestamp": "2026-06-22T00:22:34.235335Z"}, {"uuid": "55b3ad9b-3c83-44b5-ae80-eb3d5a2ae3eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47691", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motmm7mcgv2b", "content": "\ud83d\udea8  ALERT: CVE-2026-47691\n\nCVSS 8.7/10\n\n\ud83d\udccb WHAT IT IS:\nNetty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's `DnsResolveContext` insufficiently validates the bailiwick of NS records, enabling DNS Cache Poison", "creation_timestamp": "2026-06-22T00:22:48.271731Z"}, {"uuid": "1c5a888a-b85c-4f7f-9f55-415b960daa8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47932", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motmpei3en2f", "content": "\ud83d\udea8  ALERT: CVE-2026-47932\n\nCVSS 8.8/10\n\n\ud83d\udccb WHAT IT IS:\nColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnera", "creation_timestamp": "2026-06-22T00:24:33.936104Z"}, {"uuid": "91505884-9a38-4239-beda-72b519e9a3ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47928", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motn63bgyp2m", "content": "\ud83d\udea8  ALERT: CVE-2026-47928\n\nCVSS 9.6/10\n\n\ud83d\udccb WHAT IT IS:\nColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interacti", "creation_timestamp": "2026-06-22T00:32:47.627785Z"}, {"uuid": "841062d6-0e36-4c63-a997-c540356a06df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47280", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motndgqnas2n", "content": "\ud83d\udea8  ALERT: CVE-2026-47280\n\nCVSS 10.0/10\n\n\ud83d\udccb WHAT IT IS:\nImproper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a network.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Azure Resource Manager\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: unknown\nImpact: high impact on conf", "creation_timestamp": "2026-06-22T00:35:47.447095Z"}, {"uuid": "351a3765-d84c-40bf-839e-d1ac7290783b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47647", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motnfjeo2l2v", "content": "\ud83d\udea8  ALERT: CVE-2026-47647\n\nCVSS 9.9/10\n\n\ud83d\udccb WHAT IT IS:\nImproper access control in Microsoft Dynamics 365 allows an authorized attacker to elevate privileges over a network.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Microsoft Dynamics, Microsoft\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: NETWORK\nImpact: high impact on confid", "creation_timestamp": "2026-06-22T00:36:57.337919Z"}, {"uuid": "f0c4b32d-6ecf-433f-9b58-4a693c41328b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47187", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthexp7taa2t", "content": "CVE-2026-47187\nSSHFS, a network filesystem client, allows a malicious SFTP server to access and modify local files on the client machine if the server returns certain types of symlinks. This issue can be exploited by\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-19T18:40:05.264782Z"}, {"uuid": "2458a504-f918-44f6-aa9b-c97b98f26124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mouihvhsbc2y", "content": "Re: Squid CVE-2026-47729 and CVE-2026-50012", "creation_timestamp": "2026-06-22T08:41:28.409392Z"}, {"uuid": "2d54e48d-c273-4e38-b02c-8f4f7a3956fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mov5gjbcjm2v", "content": "Squidbleed (CVE-2026-47729) lets a permitted proxy user leak another user\u2019s cleartext HTTP request data via an FTP parser over-read.\n", "creation_timestamp": "2026-06-22T14:56:30.847702Z"}, {"uuid": "8a6b2dd6-8a72-4986-a2d4-cd78f3842848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/argusflow.bsky.social/post/3mov5qycgcc2u", "content": "A critical flaw from 1997, 'Squidbleed' (CVE-2026-47729), has been found in Squid Proxy. It can leak user credentials and session tokens on shared networks. #Squidbleed #CyberSecurity #Pro...\n\nhttps://verisizintisi.com/en/blog/2026-06-22-decades-old-squid-proxy-flaw-squidbleed-exposes-user-data", "creation_timestamp": "2026-06-22T15:02:22.170234Z"}, {"uuid": "f2a78e06-060f-4949-9b56-19c43b1465ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3movf6xxgna26", "content": "Squidbleed (CVE-2026-47729) in Squid can leak other users' cleartext HTTP requests, including credentials or tokens, through a long-standing FTP parser bug. Fix with a parser guard or disable FTP. #Squid #Squidbleed #CVE202647729", "creation_timestamp": "2026-06-22T17:15:27.917833Z"}, {"uuid": "7e98bde4-7ba0-4a82-b3b6-5efa8f0683a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3movfzqjqjr2x", "content": "Squidbleed, a Squid Proxy memory leak tracked as CVE-2026-47729, has existed since 1997 and can expose uncleared HTTP data, including credentials and session tokens, in shared proxy setups. #SquidProxy #Squidbleed #CVE202647729", "creation_timestamp": "2026-06-22T17:30:26.119100Z"}, {"uuid": "f60ef421-6fd8-40b8-ab04-856bece67ee4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47729", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3movlaf3lt32m", "content": "Squidbleed (CVE-2026-47729): a 1997 Squid proxy bug still leaks other users' cleartext HTTP requests via heap over-read. Proxies front many ICS networks. Patch now. #ThreatIntel #ICS\nhttps://threat-intelligence.redeyesecurity.com/blog/squidbleed-squid-proxy-heap-overread-cve-2026-47729-2026", "creation_timestamp": "2026-06-22T19:03:38.605724Z"}, {"uuid": "c2867f42-756c-42e2-a77b-c1a97af38137", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47267", "type": "published-proof-of-concept", "source": "https://github.com/gogs/gogs/security/advisories/GHSA-c4v7-xg93-qf8g", "content": "", "creation_timestamp": "2026-06-19T02:22:31.000000Z"}, {"uuid": "ded48429-1f29-46f2-95bf-9d56297bd446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47155", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow7pttdok2k", "content": "CVE-2026-47155 - vLLM: Artifact Pin Decay in vLLM allows pinned deployments to load unpinned code, weights, and processors\nCVE ID : CVE-2026-47155\n \n Published : June 22, 2026, 10:20 p.m. | 1\u00a0hour, 23\u00a0minutes ago\n \n Description : vLLM is an inference and serving engine for lar...", "creation_timestamp": "2026-06-23T01:10:10.951287Z"}, {"uuid": "9eebd71a-0904-479b-ad82-9246ca806cd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/lalgorisme.bsky.social/post/3mowu7czs222r", "content": "\ud83e\uddf5Un bug introdu\u00eft al codi de Squid el 1997 s'ha descobert el 2026, i, un cop m\u00e9s, l'ha ca\u00e7at una IA. Permet que un usuari d'una xarxa compartida llegeixi la petici\u00f3 HTTP d'un altre, credencials i tokens de sessi\u00f3 inclosos. Es diu Squidbleed (CVE-2026-47729).", "creation_timestamp": "2026-06-23T07:16:47.508011Z"}, {"uuid": "7da4543e-1b95-4591-ba55-e95b607f390a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/lalgorisme.bsky.social/post/3mowu7d2aos2r", "content": "\ud83e\uddf5Un bug introdu\u00eft al codi de Squid el 1997 s'ha descobert el 2026, i, un cop m\u00e9s, l'ha ca\u00e7at una IA. Permet que un usuari d'una xarxa compartida llegeixi la petici\u00f3 HTTP d'un altre, credencials i tokens de sessi\u00f3 inclosos. Es diu Squidbleed (CVE-2026-47729).", "creation_timestamp": "2026-06-23T07:16:48.046529Z"}, {"uuid": "ffedf082-2882-47d1-91eb-84a2b2b8b2bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/lalgorisme.bsky.social/post/3mowu7d2cnc2r", "content": "\ud83e\uddf5Un bug introdu\u00eft al codi de Squid el 1997 s'ha descobert el 2026, i, un cop m\u00e9s, l'ha ca\u00e7at una IA. Permet que un usuari d'una xarxa compartida llegeixi la petici\u00f3 HTTP d'un altre, credencials i tokens de sessi\u00f3 inclosos. Es diu Squidbleed (CVE-2026-47729).", "creation_timestamp": "2026-06-23T07:16:48.608987Z"}, {"uuid": "5e1fe67e-4a86-45cc-a19b-c4413ff362ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/lalgorisme.bsky.social/post/3mowu7d2dmk2r", "content": "\ud83e\uddf5Un bug introdu\u00eft al codi de Squid el 1997 s'ha descobert el 2026, i, un cop m\u00e9s, l'ha ca\u00e7at una IA. Permet que un usuari d'una xarxa compartida llegeixi la petici\u00f3 HTTP d'un altre, credencials i tokens de sessi\u00f3 inclosos. Es diu Squidbleed (CVE-2026-47729).", "creation_timestamp": "2026-06-23T07:16:49.170199Z"}, {"uuid": "334ee505-264a-41b9-b00f-43befe0aedc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/lalgorisme.bsky.social/post/3mowu7d2gkc2r", "content": "\ud83e\uddf5Un bug introdu\u00eft al codi de Squid el 1997 s'ha descobert el 2026, i, un cop m\u00e9s, l'ha ca\u00e7at una IA. Permet que un usuari d'una xarxa compartida llegeixi la petici\u00f3 HTTP d'un altre, credencials i tokens de sessi\u00f3 inclosos. Es diu Squidbleed (CVE-2026-47729).", "creation_timestamp": "2026-06-23T07:16:49.670886Z"}, {"uuid": "dd1ad409-fe45-4cf8-9f99-fa69d3b0092e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mowwtk74ps2u", "content": "A heap over-read vulnerability in the Squid web proxy, named Squidbleed (CVE-2026-47729), can leak cleartext HTTP requests, including credentials, to other users on the same proxy. Disclosed by Calif.io in June, the bug stems from a 1997 FTP-parsing change.", "creation_timestamp": "2026-06-23T08:03:51.769874Z"}, {"uuid": "0b628084-18ff-47ca-86d0-09b80b6c4075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/mm-ilsoftware-bot.bsky.social/post/3mox5edkuk22m", "content": "Squidbleed: falla di sicurezza rimasta nascosta in Squid Proxy per quasi 30 anni\nCVE-2026-47729, nota come Squidbleed, interessa Squid Proxy da quasi 29 anni:...\nhttps://www.ilsoftware.it/squidbleed-falla-sicurezza-nascosta-in-squid-proxy-per-29-anni/", "creation_timestamp": "2026-06-23T10:00:36.881392Z"}, {"uuid": "189f5f52-c3ff-44ff-ac5c-910c7a3a8282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3moxdr42ned2t", "content": "\ud83d\udd17 CVE : CVE-2026-47729, CVE-2026-50012", "creation_timestamp": "2026-06-23T11:55:07.769277Z"}, {"uuid": "60d88c5c-026f-4586-9e06-3cf1fde2b625", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://gist.github.com/muhamedfazalps/df83f4ac0958456ee903e56fa62cf93e", "content": "# \u26a0\ufe0f SECURITY ALERT: CVE-2026-47729 \u2014 Squidbleed (Heartbleed-style Memory Leak)\n\n## TL;DR\nIf your project uses Squid Proxy, update to the latest version immediately.\nEvery Squid version is affected by this Heartbleed-style memory leak that\ncan extract session tokens and passwords from memory.\n\n## What is Squidbleed?\n- **CVE ID:** CVE-2026-47729\n- **Type:** Heartbleed-style memory leak in Squid Proxy\n- **Impact:** Session tokens, passwords, and sensitive data can be extracted from memory\n- **Affected:** Every Squid version\n- **Disclosed:** June 19, 2026\n\n## How to Check If You're Affected\n1. Check your Squid version: `squid -v`\n2. If you're running ANY version of Squid, you're affected\n3. Check Docker images: `docker exec  squid -v`\n\n## What to Do\n1. **Update Squid** to the latest version immediately\n2. **Rotate credentials** that may have been exposed through the leak\n3. **Review logs** for suspicious access patterns\n4. **Consider alternatives** if Squid update is not immediately available\n\n## Affected Docker Images\n- `yegor256/squid-proxy` (96\u2605)\n- `zeebote/webmin-on-container` (8\u2605)\n- `babim/docker-squid` (6\u2605)\n- `chrootlogin/docker-squid` (6\u2605)\n- `ymmt2005/squid-container` (6\u2605)\n- `alexellis/squid-docker` (4\u2605)\n- Any Docker image running Squid Proxy\n\n## References\n- Issue: https://github.com/uyuni-project/uyuni/issues/12148\n- CVE: CVE-2026-47729\n\n---\n*If this alert helped you: https://buymeacoffee.com/muhamedfazalps*\n", "creation_timestamp": "2026-06-23T13:29:05.000000Z"}, {"uuid": "1d72b88e-ecd0-4f18-aa51-494bf18543d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3moxjwjy6gw2c", "content": "Squidbleed (CVE-2026-47729) : un bug d'une ligne planqu\u00e9 depuis 1997 dans le proxy Squid.\n\nRep\u00e9r\u00e9 par une IA \ud83d\udc47\nwww.it-connect.fr/squidbleed-f...\n\n#cybersecurite", "creation_timestamp": "2026-06-23T13:45:33.095378Z"}, {"uuid": "f5577376-6f95-4fab-9d03-abdec54c2349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3moxnj6h6pk2l", "content": "5/ \ud83e\udd91 Squidbleed (CVE-2026-47729): 29-year-old flaw in Squid proxy leaks another user's cleartext HTTP traffic \u2014 including credentials and session tokens. Still live in default configs. Check your proxy version now. (SecurityWeek/Cybernews)", "creation_timestamp": "2026-06-23T14:49:39.853824Z"}, {"uuid": "09ce18ce-5d95-41c9-a032-9c949c0b83b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3moxnj6hii22l", "content": "5/ \ud83e\udd91 Squidbleed (CVE-2026-47729): 29-year-old flaw in Squid proxy leaks another user's cleartext HTTP traffic \u2014 including credentials and session tokens. Still live in default configs. Check your proxy version now. (SecurityWeek/Cybernews)", "creation_timestamp": "2026-06-23T14:49:40.717948Z"}, {"uuid": "419949e9-1923-4e7d-b213-ccb4c093422b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3moxnj6hkgk2l", "content": "5/ \ud83e\udd91 Squidbleed (CVE-2026-47729): 29-year-old flaw in Squid proxy leaks another user's cleartext HTTP traffic \u2014 including credentials and session tokens. Still live in default configs. Check your proxy version now. (SecurityWeek/Cybernews)", "creation_timestamp": "2026-06-23T14:49:41.543596Z"}, {"uuid": "3fd67f38-4c59-4336-854d-3f942ce221ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3moxnj6hlfs2l", "content": "5/ \ud83e\udd91 Squidbleed (CVE-2026-47729): 29-year-old flaw in Squid proxy leaks another user's cleartext HTTP traffic \u2014 including credentials and session tokens. Still live in default configs. Check your proxy version now. (SecurityWeek/Cybernews)", "creation_timestamp": "2026-06-23T14:49:42.454569Z"}, {"uuid": "c7e04eac-dc6b-4c93-a201-21d38e5c0877", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3moxnj6hlft2l", "content": "5/ \ud83e\udd91 Squidbleed (CVE-2026-47729): 29-year-old flaw in Squid proxy leaks another user's cleartext HTTP traffic \u2014 including credentials and session tokens. Still live in default configs. Check your proxy version now. (SecurityWeek/Cybernews)", "creation_timestamp": "2026-06-23T14:49:43.267729Z"}, {"uuid": "959a0713-1600-4c4d-9163-5afcb7613d7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3moxnj6hmf32l", "content": "5/ \ud83e\udd91 Squidbleed (CVE-2026-47729): 29-year-old flaw in Squid proxy leaks another user's cleartext HTTP traffic \u2014 including credentials and session tokens. Still live in default configs. Check your proxy version now. (SecurityWeek/Cybernews)", "creation_timestamp": "2026-06-23T14:49:44.108832Z"}, {"uuid": "25f4c614-dd5b-4240-84e3-436f497239e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3moxnj6hned2l", "content": "5/ \ud83e\udd91 Squidbleed (CVE-2026-47729): 29-year-old flaw in Squid proxy leaks another user's cleartext HTTP traffic \u2014 including credentials and session tokens. Still live in default configs. Check your proxy version now. (SecurityWeek/Cybernews)", "creation_timestamp": "2026-06-23T14:49:44.955931Z"}, {"uuid": "87bf408c-2d1b-4b25-8a6e-e5131055d0bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3moxnj6hnee2l", "content": "5/ \ud83e\udd91 Squidbleed (CVE-2026-47729): 29-year-old flaw in Squid proxy leaks another user's cleartext HTTP traffic \u2014 including credentials and session tokens. Still live in default configs. Check your proxy version now. (SecurityWeek/Cybernews)", "creation_timestamp": "2026-06-23T14:49:45.795490Z"}, {"uuid": "12cb28b3-0ed7-4896-a6f8-a4ef0446c044", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3moxnj6hnef2l", "content": "5/ \ud83e\udd91 Squidbleed (CVE-2026-47729): 29-year-old flaw in Squid proxy leaks another user's cleartext HTTP traffic \u2014 including credentials and session tokens. Still live in default configs. Check your proxy version now. (SecurityWeek/Cybernews)", "creation_timestamp": "2026-06-23T14:49:46.612684Z"}, {"uuid": "f4776525-d8ee-4564-8b12-12fdfa3a09fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116801246652270712", "content": "A decades-old memory leak vulnerability in Squid Proxy, dubbed Squidbleed (CVE-2026-47729), allows attackers to capture sensitive cleartext HTTP data from shared network environments. Security researchers identified this flaw using AI, and users can secure their systems by applying the official patch or disabling FTP support.https://www.securityweek.com/decades-old-squid-proxy-flaw-squidbleed-can-expose-user-data/", "creation_timestamp": "2026-06-23T20:13:08.248594Z"}, {"uuid": "898795ad-b0b8-4d7d-a147-ed7bad03ef35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3moy7m74gbk2k", "content": "A decades-old memory leak vulnerability in Squid Proxy, dubbed Squidbleed (CVE-2026-47729), allows attackers to capture sensitive cleartext HTTP data from shared network environments.\n\nwww.securityweek.com/decades-old-...", "creation_timestamp": "2026-06-23T20:13:29.317383Z"}, {"uuid": "f3c94d5a-37ba-4a98-b4da-d9041171f57d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://threatintel.cc/2026/06/23/decadesold-squid-proxy-flaw-squidbleed.html", "content": "Decades-Old Squid Proxy Flaw ‘Squidbleed’ Can Expose User Data - SecurityWeek\n\nA decades-old memory leak vulnerability in Squid Proxy, dubbed Squidbleed (CVE-2026-47729), allows attackers to capture sensitive cleartext HTTP data from shared network environments. Security researchers identified this flaw using AI, and users can secure their systems by applying the official patch or disabling FTP support.", "creation_timestamp": "2026-06-23T18:13:11.000000Z"}, {"uuid": "6cbd37f5-6197-4a4a-adc7-edf6b0580adb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/feed.igeek.gamer-geek-news.com.ap.brid.gy/post/3moyjg4ycv4n2", "content": "\ud83d\udcf0 **29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests**\n\nA 29-year-old bug in the Squid web proxy, dubbed Squidbleed and tracked as CVE-2026-47729, can let an authorized proxy user retrieve fragments of another user's cleartext HTTP requests, including c...\n\n\ud83d\udcf0 Source [\u2026]", "creation_timestamp": "2026-06-23T23:10:25.964515Z"}, {"uuid": "56cd9900-69e5-48f1-90ff-a7bee3a675fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47693", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moylvgrwcv26", "content": "CVE-2026-47693 - Poweradmin: CSV Injection in log export endpoints allows formula execution in spreadsheet applications\nCVE ID : CVE-2026-47693\n \n Published : June 23, 2026, 10:07 p.m. | 1\u00a0hour, 36\u00a0minutes ago\n \n Description : Poweradmin is a web-based DNS administration tool ...", "creation_timestamp": "2026-06-23T23:53:22.907171Z"}, {"uuid": "ed0aa3ff-8075-4172-a540-d351224af640", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3moyp65qcz227", "content": "Squidbleed: 29-Year-Old Squid Bug Leaks User Credentials\n\nSquidbleed is a 29-year-old Squid Proxy flaw that can leak credentials, tokens, and other users\u2019 HTTP data through a memory overread. Researchers at Calif.io have disclosed CVE-2026-47729, a memory leak vulnerability in Squ\u2026\n#hackernews #news", "creation_timestamp": "2026-06-24T00:51:56.819475Z"}, {"uuid": "79db8069-1426-45ab-a385-b0f7f3477cf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mozebhypd22b", "content": "If your network routes web traffic through a Squid proxy, credentials may be leaking. A new flaw, Squidbleed (CVE-2026-47729), lets attackers read other users' cleartext HTTP requests, including auth headers and session tokens. The bug sat in Squid's default code since 1997. A patch is out.", "creation_timestamp": "2026-06-24T07:09:37.388711Z"}, {"uuid": "05f876b8-d72e-4bc8-969c-4dea71708776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4793", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msq6w2kqjg2n", "content": "\ud83d\udd17 CVE : CVE-2026-4793", "creation_timestamp": "2026-08-10T13:20:33.584633Z"}, {"uuid": "6da0e740-241a-4491-a33a-87a1c75c6aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116804930613951549", "content": "Eight-Year-Old Samsung KNOX Flaw Exposed Millions of Galaxy Devices to Kernel AttacksSource URL: https://www.securityweek.com/eight-year-old-samsung-knox-flaw-exposed-millions-of-galaxy-devices-to-kernel-attacks/Researchers disclosed a high-severity use-after-free (UAF) race condition flaw (CVE-2026-20971, CVSS 7.8) affecting Samsung Galaxy S9 through S25 devices. The bug resides in the interaction between the kernel's process authenticator (PROCA) and its integrity subsystem (FIVE), leaving a tiny preemption window open during child process spawning that attackers can exploit to compromise the kernel.Mythos Discovers 'Squidbleed,' a Memory Leak That's Gone Undetected Since Clinton EraSource URL: https://www.theregister.com/security/2026/06/23/mythos-discovers-squidbleed-a-memory-leak-thats-gone-undetected-since-clinton-era/A 29-year-old vulnerability dubbed \"Squidbleed\" (CVE-2026-47729) was discovered in the popular open-source caching proxy server Squid using Anthropic's Claude Mythos Preview AI. The flaw silently leaks users' plaintext HTTP requests, credentials, and session tokens, posing significant data exposure risks across enterprise networks and older legacy environments. It was resolved in version 7.6.FortiBleed-kyberhy\u00f6kk\u00e4yskampanjan vaikutukset n\u00e4kyv\u00e4t my\u00f6s SuomessaSource URL: https://www.kyberturvallisuuskeskus.fi/fi/uutiset/fortibleed-kyberhyokkayskampanjan-vaikutukset-nakyvat-myos-suomessaThe global FortiBleed cyberattack campaign heavily impacts Fortinet FortiGate firewalls and SSL-VPN appliances using previously leaked or stolen credentials. The Finnish National Cyber Security Centre (Kyberturvallisuuskeskus) has begun mapping targeted organizations across Finland and releasing remediation guidelines to counter ongoing unauthorized access attempts.CVE-2024-40766: The Patch Fixed the Bug. Nobody Fixed the Configuration.Source URL: https://isc.sans.edu/diary/rss/33094Despite a 2024 patch for an improper access control flaw (CVE-2024-40766, CVSS 9.3) impacting SonicWall Gen 5, 6, and 7 firewalls, ransomware operators continue to successfully compromise networks due to unmanaged configurations. The vulnerability targets the management interface and SSLVPN services, allowing threat actors to drop entire networks or gain complete device control.New macOS ClickFix Attack Silently Mounts DMGs to Push InfostealerSource URL: https://www.bleepingcomputer.com/news/security/new-macos-clickfix-attack-silently-mounts-dmgs-to-push-infostealer/A novel macOS ClickFix social engineering campaign tricks users into running malicious Terminal commands via fake CAPTCHA verification prompts. Upon execution, the script uses the native hdiutil utility to silently download, mount, and execute a disk image (DMG) bundle containing the Atomic macOS Stealer (AMOS), harvesting browser credentials, system Keychains, and crypto wallet data.'Cordyceps': Mushrooming Malicious Pull Requests Threaten Developer WorkflowsSource URL: https://www.darkreading.com/application-security/cordyceps-malicious-pull-requests-developer-workflowsDubbed \"Cordyceps,\" a newly identified architectural weakness within automated CI/CD pipelines allows malicious pull requests to compromise software supply chains. By exploiting overly permissive access controls in automated pre-merge testing workflows, attackers can execute command injection to hijack highly privileged signing keys and access tokens.The Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data ExfiltrationSource URL: https://unit42.paloaltonetworks.com/cloud-bucket-hijacking-risks/Palo Alto Networks Unit 42 uncovered a structural flaw across AWS, Google Cloud, and Microsoft Azure involving global namespace collision. Attackers can silently hijack an organization's active cloud data streams by anticipating, deleting, and immediately recreating targeted storage buckets under their own control, leaving minimal detection signatures during data exfiltration.LastPass Confirms Data Breach in Klue Supply Chain AttackSource URL: https://www.bleepingcomputer.com/news/security/lastpass-confirms-data-breach-in-klue-supply-chain-attack/LastPass suffered a security breach impacting its corporate Salesforce environment after threat actors stole OAuth tokens from Klue, a third-party market intelligence platform. While customer password vaults and internal core infrastructure remain fully isolated and untouched, the attackers successfully extracted internal corporate CRM data, customer names, and support log information.Tata Electronics Confirms Cyberattack After Alleged Apple, Tesla Documents Appear OnlineSource URL: https://therecord.media/tata-electronics-confirms-cyberattackIndian manufacturing giant Tata Electronics confirmed a recent network breach following claims by extortion group \"World Leaks,\" who published stolen documents allegedly detailing proprietary client data from Apple and Tesla. Tata maintains that the incident was isolated, successfully contained, and has caused zero operational downtime.Payouts King Ransomware Initial Access Broker Deploys New Edgecution MalwareSource URL: https://www.zscaler.com/blogs/security-research/payouts-king-ransomware-initial-access-broker-deploys-new-edgecutionZscaler ThreatLabz isolated a stealthy delivery mechanism dubbed \"Edgecution,\" deployed by initial access brokers linked to the Payouts King ransomware family. The attack abuses a malicious Microsoft Edge browser extension that manipulates the Chrome native messaging protocol to bypass browser sandboxing entirely, triggering arbitrary local file system modification and execution.AI Models Capable of Launching Major Cyberattacks Months Away, Five Eyes Alliance WarnsSource URL: https://www.cybersecuritydive.com/news/ai-cyberattacks-five-eyes-frontier-models-warning/An international intelligence coalition comprising the United States, United Kingdom, Canada, Australia, and New Zealand issued a joint advisory warning that advanced frontier AI models are rapidly collapsing offensive cyber timelines. The group cautioned corporate boards and infrastructure operators that AI-driven exploitation capabilities will outpace standard enterprise defenses in a matter of months rather than years, vastly lowering technical barriers for automated network intrusions.14 Million Email Accounts Exposed in Cyberattack on Japanese Telecom Giant KDDISource URL: https://www.nippon.com/en/news/yjj2026062301023/Japanese telecommunications provider KDDI Corp. disclosed a massive data breach targeting its email infrastructure utilized by several domestic internet service providers. The cyberattack, which exploited zero-day vulnerabilities in a third-party software component embedded in the email system, has potentially exposed up to 14.22 million user email addresses and encrypted passwords across major partner networks including JCOM, Biglobe, and Nifty.Active Exploitation of Cisco Unified Communications Manager Flaw Triggers Root-Level RiskSource URL: https://thehackernews.com/2026/06/23/attackers-exploit-cisco-unified-cm-flaw-weeks-after-patch-release/Threat intelligence teams detected active, in-the-wild exploitation of a critical server-side request forgery (SSRF) flaw in Cisco's Unified Communications Manager and Session Management Edition. Tracked as CVE-2026-20230 (CVSS 8.6), the bug allows unauthenticated, remote attackers to send crafted HTTP requests to the WebDialer service, enabling them to write arbitrary files directly to the underlying operating system and escalate privileges to root.", "creation_timestamp": "2026-06-24T11:49:58.294754Z"}, {"uuid": "407532b6-2852-4a8e-b144-c50ad9636a62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47240", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mozukgu2nh2p", "content": "\n\ud83d\udea8 New MEDIUM CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-47240 impacts net-imap in 4 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/583\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-06-24T12:00:57.132261Z"}, {"uuid": "93f9ffe1-d453-4196-9e0d-b957adf8eba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47242", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mozukj3dql2m", "content": "\n\ud83d\udea8 New MEDIUM CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-47242 impacts net-imap in 4 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/584\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-06-24T12:00:59.411795Z"}, {"uuid": "44843163-f6f0-42cd-9362-86b6624da425", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47241", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mozuklfax72l", "content": "\n\ud83d\udea8 New LOW CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-47241 impacts net-imap in 4 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/585\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-06-24T12:01:01.826319Z"}, {"uuid": "b4073377-fad5-4e6a-9526-df1102dbfa61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://threatintel.cc/2026/06/24/morning-cyber-summary.html", "content": "Eight-Year-Old Samsung KNOX Flaw Exposed Millions of Galaxy Devices to Kernel Attacks\n\nSource URL: https://www.securityweek.com/eight-year-old-samsung-knox-flaw-exposed-millions-of-galaxy-devices-to-kernel-attacks/\nResearchers disclosed a high-severity use-after-free (UAF) race condition flaw (CVE-2026-20971, CVSS 7.8) affecting Samsung Galaxy S9 through S25 devices. The bug resides in the interaction between the kernel’s process authenticator (PROCA) and its integrity subsystem (FIVE), leaving a tiny preemption window open during child process spawning that attackers can exploit to compromise the kernel.\n\nMythos Discovers ‘Squidbleed,’ a Memory Leak That’s Gone Undetected Since Clinton Era\n\nSource URL: https://www.theregister.com/security/2026/06/23/mythos-discovers-squidbleed-a-memory-leak-thats-gone-undetected-since-clinton-era/\nA 29-year-old vulnerability dubbed “Squidbleed” (CVE-2026-47729) was discovered in the popular open-source caching proxy server Squid using Anthropic’s Claude Mythos Preview AI. The flaw silently leaks users' plaintext HTTP requests, credentials, and session tokens, posing significant data exposure risks across enterprise networks and older legacy environments. It was resolved in version 7.6.\n\nFortiBleed-kyberhy\u00f6kk\u00e4yskampanjan vaikutukset n\u00e4kyv\u00e4t my\u00f6s Suomessa\n\nSource URL: https://www.kyberturvallisuuskeskus.fi/fi/uutiset/fortibleed-kyberhyokkayskampanjan-vaikutukset-nakyvat-myos-suomessa\nThe global FortiBleed cyberattack campaign heavily impacts Fortinet FortiGate firewalls and SSL-VPN appliances using previously leaked or stolen credentials. The Finnish National Cyber Security Centre (Kyberturvallisuuskeskus) has begun mapping targeted organizations across Finland and releasing remediation guidelines to counter ongoing unauthorized access attempts.\n\nCVE-2024-40766: The Patch Fixed the Bug. Nobody Fixed the Configuration.\n\nSource URL: https://isc.sans.edu/diary/rss/33094\nDespite a 2024 patch for an improper access control flaw (CVE-2024-40766, CVSS 9.3) impacting SonicWall Gen 5, 6, and 7 firewalls, ransomware operators continue to successfully compromise networks due to unmanaged configurations. The vulnerability targets the management interface and SSLVPN services, allowing threat actors to drop entire networks or gain complete device control.\n\nNew macOS ClickFix Attack Silently Mounts DMGs to Push Infostealer\n\nSource URL: https://www.bleepingcomputer.com/news/security/new-macos-clickfix-attack-silently-mounts-dmgs-to-push-infostealer/\nA novel macOS ClickFix social engineering campaign tricks users into running malicious Terminal commands via fake CAPTCHA verification prompts. Upon execution, the script uses the native hdiutil utility to silently download, mount, and execute a disk image (DMG) bundle containing the Atomic macOS Stealer (AMOS), harvesting browser credentials, system Keychains, and crypto wallet data.\n\n‘Cordyceps’: Mushrooming Malicious Pull Requests Threaten Developer Workflows\n\nSource URL: https://www.darkreading.com/application-security/cordyceps-malicious-pull-requests-developer-workflows\nDubbed “Cordyceps,” a newly identified architectural weakness within automated CI/CD pipelines allows malicious pull requests to compromise software supply chains. By exploiting overly permissive access controls in automated pre-merge testing workflows, attackers can execute command injection to hijack highly privileged signing keys and access tokens.\n\nThe Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data Exfiltration\n\nSource URL: https://unit42.paloaltonetworks.com/cloud-bucket-hijacking-risks/\nPalo Alto Networks Unit 42 uncovered a structural flaw across AWS, Google Cloud, and Microsoft Azure involving global namespace collision. Attackers can silently hijack an organization’s active cloud data streams by anticipating, deleting, and immediately recreating targeted storage buckets under their own control, leaving minimal detection signatures during data exfiltration.\n\nLastPass Confirms Data Breach in Klue Supply Chain Attack\n\nSource URL: https://www.bleepingcomputer.com/news/security/lastpass-confirms-data-breach-in-klue-supply-chain-attack/\nLastPass suffered a security breach impacting its corporate Salesforce environment after threat actors stole OAuth tokens from Klue, a third-party market intelligence platform. While customer password vaults and internal core infrastructure remain fully isolated and untouched, the attackers successfully extracted internal corporate CRM data, customer names, and support log information.\n\nTata Electronics Confirms Cyberattack After Alleged Apple, Tesla Documents Appear Online\n\nSource URL: https://therecord.media/tata-electronics-confirms-cyberattack\nIndian manufacturing giant Tata Electronics confirmed a recent network breach following claims by extortion group “World Leaks,” who published stolen documents allegedly detailing proprietary client data from Apple and Tesla. Tata maintains that the incident was isolated, successfully contained, and has caused zero operational downtime.\n\nPayouts King Ransomware Initial Access Broker Deploys New Edgecution Malware\n\nSource URL: https://www.zscaler.com/blogs/security-research/payouts-king-ransomware-initial-access-broker-deploys-new-edgecution\nZscaler ThreatLabz isolated a stealthy delivery mechanism dubbed “Edgecution,” deployed by initial access brokers linked to the Payouts King ransomware family. The attack abuses a malicious Microsoft Edge browser extension that manipulates the Chrome native messaging protocol to bypass browser sandboxing entirely, triggering arbitrary local file system modification and execution.\n\nAI Models Capable of Launching Major Cyberattacks Months Away, Five Eyes Alliance Warns\n\nSource URL: https://www.cybersecuritydive.com/news/ai-cyberattacks-five-eyes-frontier-models-warning/\nAn international intelligence coalition comprising the United States, United Kingdom, Canada, Australia, and New Zealand issued a joint advisory warning that advanced frontier AI models are rapidly collapsing offensive cyber timelines. The group cautioned corporate boards and infrastructure operators that AI-driven exploitation capabilities will outpace standard enterprise defenses in a matter of months rather than years, vastly lowering technical barriers for automated network intrusions.\n\n14 Million Email Accounts Exposed in Cyberattack on Japanese Telecom Giant KDDI\n\nSource URL: https://www.nippon.com/en/news/yjj2026062301023/\nJapanese telecommunications provider KDDI Corp. disclosed a massive data breach targeting its email infrastructure utilized by several domestic internet service providers. The cyberattack, which exploited zero-day vulnerabilities in a third-party software component embedded in the email system, has potentially exposed up to 14.22 million user email addresses and encrypted passwords across major partner networks including JCOM, Biglobe, and Nifty.\n\nActive Exploitation of Cisco Unified Communications Manager Flaw Triggers Root-Level Risk\n\nSource URL: https://thehackernews.com/2026/06/23/attackers-exploit-cisco-unified-cm-flaw-weeks-after-patch-release/\nThreat intelligence teams detected active, in-the-wild exploitation of a critical server-side request forgery (SSRF) flaw in Cisco’s Unified Communications Manager and Session Management Edition. Tracked as CVE-2026-20230 (CVSS 8.6), the bug allows unauthenticated, remote attackers to send crafted HTTP requests to the WebDialer service, enabling them to write arbitrary files directly to the underlying operating system and escalate privileges to root.", "creation_timestamp": "2026-06-24T09:50:42.000000Z"}, {"uuid": "5bd27951-3642-4611-8b1c-1690c79e4dcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/modat-io.bsky.social/post/3mp22t4l6222l", "content": "\u26a0\ufe0f Squidbleed (CVE-2026-47729, CVSS 6.5): a flaw in Squid's FTP parser that can leak another user's cleartext HTTP request, including credentials, to someone already using the same proxy. Upgrade and verify the patch, or disable FTP. Query: technology=\"Squid Proxy\"", "creation_timestamp": "2026-06-24T13:53:18.234130Z"}, {"uuid": "e2be4760-a141-4153-8acc-3b025a99ce8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mp2gmdwfrf2b", "content": "Re: Squid CVE-2026-47729 and CVE-2026-50012", "creation_timestamp": "2026-06-24T17:24:08.635664Z"}, {"uuid": "46ef2073-c099-483b-ae16-7e6242058093", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mp2kns75ze2g", "content": "Squidbleed (CVE-2026-47729) #appsec", "creation_timestamp": "2026-06-24T18:36:32.362275Z"}, {"uuid": "cd121df1-ee34-40a1-b927-8618cfca3811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mp2kzpe7xx2t", "content": "Re: Squid CVE-2026-47729 and CVE-2026-50012", "creation_timestamp": "2026-06-24T18:43:11.836279Z"}, {"uuid": "6d80c795-133e-4cdf-8d96-33e76fa2a536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47733", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp2xnkkgdz25", "content": "CVE-2026-47733 - Rocket.Chat: Missing URL protocol sanitization in ImageElement allows javascript: URLs in markdown images\nCVE ID : CVE-2026-47733\n \n Published : June 24, 2026, 8:51 p.m. | 53\u00a0minutes ago\n \n Description : Rocket.Chat is an open-source, secure, fully customizabl...", "creation_timestamp": "2026-06-24T22:29:10.770823Z"}, {"uuid": "d7579f14-4a73-4e2b-ac19-bee92a7e4a2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mp3f5lq7nf2t", "content": "Top 3 CVE for last 7 days:\nCVE-2026-55200: 44 interactions\nCVE-2026-47729: 18 interactions\nCVE-2026-50656: 17 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-55200: 35 interactions\nCVE-2026-20230: 8 interactions\nCVE-2026-20245: 7 interactions\n", "creation_timestamp": "2026-06-25T02:30:39.376264Z"}, {"uuid": "fb1b7767-b7bb-4da3-8c90-d7da21778245", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/stanislavfort.bsky.social/post/3mp4dfazza22u", "content": "That \"Squidbleed\" vulnerability (CVE-2026-47729) that Mythos\"discovered\" in April? Yeah no AISLE actually already reported it back in March, full 44 days before Mythos. Another great live example of the value of the system over the model in zero-day discovery.", "creation_timestamp": "2026-06-25T11:31:53.807861Z"}, {"uuid": "a85b7932-e259-43fd-8d14-a5ccb36b549c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47770", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp52ieq6bl2u", "content": "CVE-2026-47770 - jq: stack overflow in deep structural equality\nCVE ID : CVE-2026-47770\n \n Published : June 25, 2026, 5:22 p.m. | 22\u00a0minutes ago\n \n Description : jq is a command-line JSON processor. Prior to 1.8.2, comparing two sufficiently deeply nested arrays with the == op...", "creation_timestamp": "2026-06-25T18:25:09.798817Z"}, {"uuid": "42525c86-e09f-4e7b-8308-97467e1d9c07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47647", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mp5ucfnlt32h", "content": "\ud83d\udccc CVE-2026-47647 - Improper access control in Microsoft Dynamics 365 allows an authorized attacker to elevate privileges over a network. https://www.cyberhub.blog/cves/CVE-2026-47647", "creation_timestamp": "2026-06-26T02:07:08.800303Z"}, {"uuid": "c9b62999-0b8e-4713-805d-9089c54e42a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mp5vmtrhn32i", "content": "Top 3 CVE for last 7 days:\nCVE-2026-55200: 44 interactions\nCVE-2026-47729: 43 interactions\nCVE-2026-8461: 34 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-8461: 26 interactions\nCVE-2026-47729: 25 interactions\nCVE-2026-20245: 6 interactions\n", "creation_timestamp": "2026-06-26T02:30:50.705556Z"}, {"uuid": "af1f60a4-7f1d-4479-9501-fed512514c65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47729", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mp6nn2y3uf2x", "content": "Original text: \"Squidbleed: A 29-Year-Old Heap Over-Read Leaks Cleartext HTTP in Squid (CVE-2026-47729)\" \u2014 Dark Web Informer (June 24, 2026). This is an independent technical write-up of the same vulnerability.\nhttps://core-jmp.org/2026/06/squidbleed-cve-2026-47729-squid-ftp-heap-over-read/", "creation_timestamp": "2026-06-26T09:40:29.251757Z"}, {"uuid": "4026cec5-d082-49f8-bff8-3c3f339e9a13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47117", "type": "seen", "source": "Telegram/EqoYaV6nsS8NdFMiUlh20F2PL0M0xTB12P2J_sYTarvuZL8", "content": "", "creation_timestamp": "2026-08-17T18:00:05.880220Z"}, {"uuid": "f4dcd555-58f5-4f98-9973-018c4b47df79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47103", "type": "seen", "source": "Telegram/EqoYaV6nsS8NdFMiUlh20F2PL0M0xTB12P2J_sYTarvuZL8", "content": "", "creation_timestamp": "2026-08-17T18:00:06.007445Z"}, {"uuid": "dc199c28-1620-480c-8673-8e24f6629994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47117", "type": "seen", "source": "Telegram/qtlWc_b7dirbvxiOK4Nhc4t041ZYL6xsiFpFlakikDua2bE", "content": "", "creation_timestamp": "2026-08-17T18:00:06.498123Z"}, {"uuid": "2522f043-9d0c-4f8a-8472-2391243d5402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47070", "type": "published-proof-of-concept", "source": "https://github.com/benoitc/hackney/security/advisories/GHSA-h73q-4w9q-82h4", "content": "", "creation_timestamp": "2026-06-26T22:35:10.212997Z"}, {"uuid": "de96e046-d626-43e0-b11c-2da2351a5608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47076", "type": "published-proof-of-concept", "source": "https://github.com/benoitc/hackney/security/advisories/GHSA-pj7v-xfvx-wmjq", "content": "", "creation_timestamp": "2026-06-26T22:35:12.629415Z"}, {"uuid": "36186a35-2c87-4ce5-8ab9-6347c73c4c5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47071", "type": "published-proof-of-concept", "source": "https://github.com/benoitc/hackney/security/advisories/GHSA-gp9c-pm5m-5cxr", "content": "", "creation_timestamp": "2026-06-26T22:35:15.052683Z"}, {"uuid": "1c8e639b-fb4a-44c1-a2ca-25dc2b7b6c0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47645", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mp7x6mzss72m", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-47645](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47645)\nUrl redire...\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47645 #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-06-26T22:04:00.642867Z"}, {"uuid": "e017171e-5850-463d-8dd6-8e0ba1458ec3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47206", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp7l5zmofk2i", "content": "CVE-2026-47206 - Dragonfly: RESP Protocol Injection via Lua redis.error_reply() in EvalSerializer\nCVE ID : CVE-2026-47206\n \n Published : June 26, 2026, 4:39 p.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : Dragonfly is an in-memory data store built for modern application workload...", "creation_timestamp": "2026-06-26T18:28:55.404960Z"}, {"uuid": "d3e11f71-4d3e-49e5-b55b-6048115d8b28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47072", "type": "published-proof-of-concept", "source": "https://github.com/benoitc/hackney/security/advisories/GHSA-f9vr-g2g2-x9fg", "content": "", "creation_timestamp": "2026-06-26T22:35:02.524639Z"}, {"uuid": "a10b347f-ce5e-47b1-9c04-a6256fcb72e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47075", "type": "published-proof-of-concept", "source": "https://github.com/benoitc/hackney/security/advisories/GHSA-j9wq-vxxc-94wf", "content": "", "creation_timestamp": "2026-06-26T22:35:05.161965Z"}, {"uuid": "0dca7b34-2469-45d3-beac-1e62a0ae7d43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47074", "type": "published-proof-of-concept", "source": "https://github.com/benoitc/hackney/security/advisories/GHSA-jq4m-q6p2-8gwc", "content": "", "creation_timestamp": "2026-06-26T22:35:07.787712Z"}, {"uuid": "660174ce-6a26-4920-98af-6b9cde4f3b6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47066", "type": "published-proof-of-concept", "source": "https://github.com/benoitc/hackney/security/advisories/GHSA-6cp8-v795-jr2j", "content": "", "creation_timestamp": "2026-06-26T22:35:17.670102Z"}, {"uuid": "7a327cab-a3e4-4b54-b77b-f6e7825b2d1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47069", "type": "published-proof-of-concept", "source": "https://github.com/benoitc/hackney/security/advisories/GHSA-mp55-p8c9-rfw2", "content": "", "creation_timestamp": "2026-06-26T22:35:20.129106Z"}, {"uuid": "d26bbfb7-1541-4bb5-8e53-e95faef2959d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47074", "type": "published-proof-of-concept", "source": "https://github.com/ex-aws/ex_aws_sns/security/advisories/GHSA-8jgf-23q5-x7xx", "content": "", "creation_timestamp": "2026-06-26T22:35:42.942408Z"}, {"uuid": "4618c6f5-fd91-40f6-9373-abfa6f565d76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47067", "type": "published-proof-of-concept", "source": "https://github.com/benoitc/hackney/security/advisories/GHSA-9653-rcfr-5c62", "content": "", "creation_timestamp": "2026-06-27T00:35:54.545165Z"}, {"uuid": "a6e4a4a5-9ec6-40f4-8e12-aa7c2f061715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47073", "type": "published-proof-of-concept", "source": "https://github.com/benoitc/hackney/security/advisories/GHSA-q8jg-fgj4-fphf", "content": "", "creation_timestamp": "2026-06-27T00:35:56.954454Z"}, {"uuid": "d287a370-dc00-43c7-891d-cc33aae1e6f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mpag345cgv2v", "content": "Top 3 CVE for last 7 days:\nCVE-2026-55200: 45 interactions\nCVE-2026-47729: 38 interactions\nCVE-2026-8461: 34 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-46331: 10 interactions\nCVE-2026-34916: 4 interactions\nCVE-2026-20245: 3 interactions\n", "creation_timestamp": "2026-06-27T02:30:28.503229Z"}, {"uuid": "5ac3ff58-514f-49d8-a795-c694b8f29f1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4786", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mpbv46oih22z", "content": " \ud83d\udee1\ufe0f RLSA-2026:28581 acaba de sair para Rocky Linux 10!\nCorrige CVE-2026-4786 (inje\u00e7\u00e3o de comandos em webbrowser.open()) e CVE-2026-6019.   Saiba mais:- > tinyurl.com/3sfn6973", "creation_timestamp": "2026-06-27T16:32:12.369326Z"}, {"uuid": "0a9dad79-f1b3-4bf1-bfd6-08734a4396d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4786", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mpbv47rz622z", "content": " \ud83d\udee1\ufe0f RLSA-2026:28581 acaba de sair para Rocky Linux 10!\nCorrige CVE-2026-4786 (inje\u00e7\u00e3o de comandos em webbrowser.open()) e CVE-2026-6019.   Saiba mais:- > tinyurl.com/3sfn6973", "creation_timestamp": "2026-06-27T16:32:12.843965Z"}, {"uuid": "827b7d36-708a-4fb8-804a-d32de1a84b19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mpcwkncjr422", "content": "Top 3 CVE for last 7 days:\nCVE-2026-55200: 45 interactions\nCVE-2026-47729: 37 interactions\nCVE-2026-8461: 35 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-9076: 3 interactions\nCVE-2025-60467: 2 interactions\nCVE-2026-20253: 2 interactions\n", "creation_timestamp": "2026-06-28T02:30:49.079207Z"}, {"uuid": "1924b150-bc84-49c3-86fc-0060505b2079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47193", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpfbyraaz22y", "content": "\ud83d\udfe0 CVE-2026-47193 - High (7.5)\n\nOpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, th...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47193/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-29T01:00:55.396657Z"}, {"uuid": "930f018b-7376-4a6a-b749-e2670a126287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mpfgzudnqx2d", "content": "Top 3 CVE for last 7 days:\nCVE-2026-55200: 45 interactions\nCVE-2026-47729: 36 interactions\nCVE-2026-8461: 35 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-58053: 4 interactions\nCVE-2026-10643: 3 interactions\nCVE-2026-58049: 3 interactions\n", "creation_timestamp": "2026-06-29T02:30:59.311629Z"}, {"uuid": "531b838e-1763-479f-b9cc-74b4a5b34572", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47735", "type": "seen", "source": "https://bsky.app/profile/nachovdk.bsky.social/post/3mpgpuvxvpc22", "content": "#Arc 26.06.2 shipped today.\n\nFIPS 140-3 build for defense and regulated environments. Signed supply chain: SBOMs, cosign, SLSA Level 3 provenance. CVE-2026-47735 fully closed.\n\nPerformance: single-hour flush 16ms \u2192 1.25ms, 201MB \u2192 0B allocated. Ingest 20.0M \u2192 20.9M rec/s.\n\nDrop-in upgrade.", "creation_timestamp": "2026-06-29T14:41:58.468109Z"}, {"uuid": "1f923a22-cb4f-41cb-9d59-c8641e9c7932", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4793", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0988", "content": "", "creation_timestamp": "2026-08-13T08:45:48.446369Z"}, {"uuid": "09bb4081-beb5-470f-b751-a98f83b7406f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47931", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph47dgzlh2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-47931 \u0432 Adobe ColdFusion: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/FC2618FE-776A-41D1-AB89-CE8CBFD5B80C", "creation_timestamp": "2026-06-29T18:22:31.500549Z"}, {"uuid": "10d21e30-f204-4d3b-814e-45ade959b953", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mphxidm26u2q", "content": "Top 3 CVE for last 7 days:\nCVE-2026-55200: 48 interactions\nCVE-2026-47729: 36 interactions\nCVE-2026-8461: 35 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-46817: 9 interactions\nCVE-2026-43503: 4 interactions\nCVE-2026-20230: 3 interactions\n", "creation_timestamp": "2026-06-30T02:30:44.255509Z"}, {"uuid": "f5d00e69-3895-492a-8fb9-fdb7800245ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47754", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msql7whmi22h", "content": "\ud83d\udd34 CVE-2026-47754 - Critical (9.3)\n\nMetacat is data repository software that helps researchers preserve, share, and discover data. Ve...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47754/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-10T17:00:50.383612Z"}, {"uuid": "bc6d2a59-bf6e-49e6-aae9-c6835c7f21ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47285", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1004", "content": "", "creation_timestamp": "2026-08-13T08:52:32.888532Z"}, {"uuid": "a4f5aebc-246c-444b-88f1-72b449b1366f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47686", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcj2snb5t2u", "content": "CVE-2026-47686 - vm2\nA vulnerability in VM2 versions up to 3.11.3 allows malicious code to escape the sandbox and execute arbitrary commands on the host system. This is because VM2 does not properly sanitize the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #npm #CVE #infosec", "creation_timestamp": "2026-08-17T20:10:08.983945Z"}, {"uuid": "b1c020b5-d530-4ba3-a545-52125e9d040e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47698", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcjmnli3k24", "content": "CVE-2026-47698 - vm2\nThe vm2 sandboxing system has a security weakness that allows attackers to write code that can break free from the sandbox and execute malicious commands on the host system. This means that if\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #npm #CVE #infosec", "creation_timestamp": "2026-08-17T20:20:04.499314Z"}, {"uuid": "434cb4a0-9046-488d-b179-8da43dfa3e26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47698", "type": "published-proof-of-concept", "source": "https://github.com/patriksimek/vm2/security/advisories/GHSA-cfcw-xp6x-25gj", "content": "", "creation_timestamp": "2026-08-17T20:35:07.324167Z"}, {"uuid": "1800ecaa-9396-49e0-b8c6-9cc5e510956f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47683", "type": "published-proof-of-concept", "source": "https://github.com/patriksimek/vm2/security/advisories/GHSA-gmc2-2x9w-cgh9", "content": "", "creation_timestamp": "2026-08-17T20:35:16.338142Z"}, {"uuid": "15350afc-8a01-46a7-ac0e-24fe64a50120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47686", "type": "published-proof-of-concept", "source": "https://github.com/patriksimek/vm2/security/advisories/GHSA-m283-3h24-438v", "content": "", "creation_timestamp": "2026-08-17T20:35:14.082781Z"}, {"uuid": "54178b53-1bdb-407a-af45-40da166e6461", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47827", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtlteoepai2z", "content": "Cloud Foundry BOSH CLI for Windows\u306b\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u3002\u30ea\u30e2\u30fc\u30c8\u653b\u6483\u8005\u304c\u4efb\u610f\u30b7\u30a7\u30eb\u30b3\u30de\u30f3\u30c9\u5b9f\u884c\u53ef\u80fd\u3002\nCVE-2026-47827 CVSS 7.5 | HIGH", "creation_timestamp": "2026-08-21T13:08:32.059225Z"}, {"uuid": "e0289e38-f86e-4409-833e-b3609b32d511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47105", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpj5j4kyvg2z", "content": "CVE-2026-47105\nCVE ID : CVE-2026-47105\n \n Published : June 30, 2026, 12:50 p.m. | 55\u00a0minutes ago\n \n Description : None\n \n Severity: 0.0 | NA\n \n Visit the link for more details, such as CVSS details, affected products, timeline, and more...\n#CVE", "creation_timestamp": "2026-06-30T13:51:12.587236Z"}, {"uuid": "2bbf87f7-0304-4d42-ac33-72c562a22c20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47754", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3msqp2ejjjz2z", "content": "CVE-2026-47754 - Critical unauthenticated path traversal in Metacat (1.x-2.19.1). File read via archiveEntryName. CVSS 9.3. No patch yet. Disable exposure now. #CVE #Metacat #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-47754/", "creation_timestamp": "2026-08-10T18:09:18.541329Z"}, {"uuid": "df9d34d4-bb7b-474c-bdc4-e104492f67a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47754", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117072550822098454", "content": "CVE-2026-47754 - Critical unauthenticated path traversal in Metacat (1.x-2.19.1). File read via archiveEntryName. CVSS 9.3. No patch yet. Disable exposure now. #CVE #Metacat #infosec\nhttps://www.valtersit.com/cve/CVE-2026-47754/", "creation_timestamp": "2026-08-10T18:09:19.716661Z"}, {"uuid": "d2eb31d6-c1c0-472a-a9ff-0ac7fce12ba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mpkhxm4m5225", "content": "Top 3 CVE for last 7 days:\nCVE-2026-55200: 41 interactions\nCVE-2026-8461: 30 interactions\nCVE-2026-47729: 29 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-46817: 11 interactions\nCVE-2026-20245: 4 interactions\nCVE-2026-33825: 4 interactions\n", "creation_timestamp": "2026-07-01T02:30:56.106836Z"}, {"uuid": "ea6a84fc-1ecf-4ce7-a9ba-0f380b8d5542", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-028", "content": "", "creation_timestamp": "2026-07-01T02:45:07.374588Z"}, {"uuid": "3bf72579-f878-4ecf-a565-a23b3f8cda80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47754", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msqsg43zy52f", "content": "Metacat 1.x\u304a\u3088\u30732.x (2.19.1\u307e\u3067) \u306b\u672a\u8a8d\u8a3c\u306e\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u306f\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u307f\u53d6\u308c\u308b\u3002\nCVE-2026-47754 CVSS 9.3 | CRITICAL\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-47754", "creation_timestamp": "2026-08-10T19:09:33.139712Z"}, {"uuid": "31d4c947-f235-4960-9643-3ea48f432ea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47754", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqt4iqe672r", "content": "CVE-2026-47754 - metacat\nVersions 2.x through 2.19.1 of Metacat's data repository software have a security flaw that allows unauthorized access to files on the server. This could lead to sensitive information\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#metacat #nceas #CVE #infosec", "creation_timestamp": "2026-08-10T19:22:34.957131Z"}, {"uuid": "efd0eeb7-cd1b-4ff8-913e-68099cd18eee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47074", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-8jgf-23q5-x7xx", "content": "", "creation_timestamp": "2026-07-01T02:50:30.747383Z"}, {"uuid": "06cd3d3d-f4f6-4586-948d-ce3e4058eea7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47077", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-jq4m-q6p2-8gwc", "content": "", "creation_timestamp": "2026-07-01T02:50:33.104815Z"}, {"uuid": "bf72eb83-7f69-4686-8e03-faaaf2883ff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47686", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtcpnvyjti2f", "content": "\ud83d\udea8 CVE-2026-47686 \u2014 CVSS 9.9 CRITICAL\n\nvm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, handleException() in lib/setup-sandbox.js sa...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-47686\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T22:08:09.207524Z"}, {"uuid": "1708a196-22fd-4914-ba1d-1c54d79d5303", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47698", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtcpo6ihbu2p", "content": "\ud83d\udea8 CVE-2026-47698 \u2014 CVSS 9.8 CRITICAL\n\nvm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, lib/bridge.js and lib/setup-sandbox.js fail ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-47698\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T22:08:18.051088Z"}, {"uuid": "b9da634e-3955-465a-8636-3f9be63a9fe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47645", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpln6tfy6c2l", "content": "\ud83d\udccc CVE-2026-47645 - Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to elevate privileges ove... https://www.cyberhub.blog/cves/CVE-2026-47645", "creation_timestamp": "2026-07-01T13:37:07.083470Z"}, {"uuid": "e9d5515e-0937-483a-8879-f1192258e249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47262", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpmckxbuhm2m", "content": "CVE-2026-47262 - containerd image-triggered runtime DoS via unbounded group parsing\nCVE ID : CVE-2026-47262\n \n Published : July 1, 2026, 5:48 p.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9,...", "creation_timestamp": "2026-07-01T19:59:51.443395Z"}, {"uuid": "2f38564a-6a3e-45aa-ae41-5344f5af6461", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mpmyftwohd2w", "content": "Top 3 CVE for last 7 days:\nCVE-2026-46817: 30 interactions\nCVE-2026-8461: 27 interactions\nCVE-2026-47729: 25 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-46817: 10 interactions\nCVE-2026-43503: 8 interactions\nCVE-2026-33825: 4 interactions\n", "creation_timestamp": "2026-07-02T02:30:33.249648Z"}, {"uuid": "a3e51d15-e1a3-4eb9-8d3a-bdf57209ba13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47719", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtfkf763wn2i", "content": "CVE-2026-47719 - Critical SSRF in FUXA SCADA/HMI. Unauthenticated attackers can probe internal networks via axios. CVSS 8.2. Unpatched - restrict access now. #CVE #ICS #cybersecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-47719/", "creation_timestamp": "2026-08-19T01:11:47.539861Z"}, {"uuid": "1e43fcc0-6913-4d73-bcff-7b9044213ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47295", "type": "seen", "source": "https://bsky.app/profile/azureweekly.info/post/agevo6paslqhs", "content": "How a SQL Server backup can execute attacker\u2026 by Fabiano Amorim\nhttps://www.red-gate.com/simple-talk/databases/sql-server/how-a-sql-server-backup-can-execute-attacker-code-during-restore-and-how-to-prevent-it-cve-2026-47295-vulnerability/?utm_source=bluesky&utm_medium=social&utm_campaign=newsletter", "creation_timestamp": "2026-08-10T20:45:25.202707Z"}, {"uuid": "cec5603e-bf69-4f41-90be-cd5617f1a32a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47719", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117119510573941685", "content": "CVE-2026-47719 - Critical SSRF in FUXA SCADA/HMI. Unauthenticated attackers can probe internal networks via axios. CVSS 8.2. Unpatched - restrict access now. #CVE #ICS #cybersecurity\nhttps://www.valtersit.com/cve/CVE-2026-47719/", "creation_timestamp": "2026-08-19T01:12:11.141328Z"}, {"uuid": "ffa4ac34-86b1-435c-aeb0-41cd77ce739c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47299", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1003", "content": "", "creation_timestamp": "2026-08-13T09:49:01.947137Z"}, {"uuid": "021f02cc-5ca8-4779-8830-6b532643654e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47117", "type": "published-proof-of-concept", "source": "Telegram/qtlWc_b7dirbvxiOK4Nhc4t041ZYL6xsiFpFlakikDua2bE", "content": "", "creation_timestamp": "2026-08-18T00:00:09.907744Z"}, {"uuid": "c715a595-0fd3-477a-913f-55321622febd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47103", "type": "published-proof-of-concept", "source": "Telegram/EqoYaV6nsS8NdFMiUlh20F2PL0M0xTB12P2J_sYTarvuZL8", "content": "", "creation_timestamp": "2026-08-18T00:00:10.145001Z"}, {"uuid": "1cc9ac7a-3445-4273-afee-d84ca4da8fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47117", "type": "published-proof-of-concept", "source": "Telegram/EqoYaV6nsS8NdFMiUlh20F2PL0M0xTB12P2J_sYTarvuZL8", "content": "", "creation_timestamp": "2026-08-18T00:00:10.286701Z"}, {"uuid": "cfa98532-b5be-45f7-8913-81b231a4977f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47330", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T06:56:15.726692Z"}, {"uuid": "11707309-4b54-40b1-9c54-23d3aad0b3d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47326", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T06:56:06.837328Z"}, {"uuid": "b485bf86-95e3-41e3-b276-4b4cc33d3a8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47327", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T06:56:09.048353Z"}, {"uuid": "f55b5f89-91ba-4d25-9b41-55b162b77a38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47328", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T06:56:11.264648Z"}, {"uuid": "d7e885c5-e647-4560-92f2-208810d6c332", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47329", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T06:56:13.504626Z"}, {"uuid": "9a3aea55-3318-43cd-ac2b-d98a162042c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47332", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T06:56:17.894471Z"}, {"uuid": "0bdbb67e-aa3f-4070-b677-f330180e7f09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47333", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T06:56:20.071274Z"}, {"uuid": "600a5191-2c49-4fe0-9fc8-71aa6f48e352", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47334", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T06:56:22.226795Z"}, {"uuid": "72677ee8-68e3-4d50-9c03-26108fd1f8a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47337", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T06:56:24.392020Z"}, {"uuid": "65bfa67b-807f-4c3d-9c20-7ffd7fb12f45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfpsfcx5c2c", "content": "\ud83d\udea8 CVE-2026-47301 \u2014 Microsoft SCCM Vulnerability\n\nCVSS 8.8 \u2022 Low privileges \u2022 No user interaction \u2022 Public PoC available \u2022 Attack chain can lead to SYSTEM code execution.\n\nstemshop.top/blog/cve-202...\n\n#CVE #CVE202647301 #Microsoft #SCCM #RCE #CyberSecurity #InfoSec #PoC", "creation_timestamp": "2026-08-19T02:48:42.944837Z"}, {"uuid": "874a91eb-116d-4234-80e2-3bb6490309fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47285", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:16:09.581829Z"}, {"uuid": "67ec9745-9806-457b-93b1-3fd4995b7e93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47262", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnt655p6z2q", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-47262 \u0432 containerd: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/DCB29FF3-489D-4314-8FA3-89F10DE86AB3", "creation_timestamp": "2026-07-02T10:29:25.394309Z"}, {"uuid": "38d632b0-1d12-46e3-9bc1-862be9ffa82a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4767", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpoe2bhq6y2a", "content": "CVE-2026-4767 - Improper Access Control in TR7's WAF-ASP\nCVE ID : CVE-2026-4767\n \n Published : July 2, 2026, 1:12 p.m. | 2\u00a0hours ago\n \n Description : Missing authentication for critical function vulnerability in TR7 Cyber \u200b\u200bDefense Inc. WAF-ASP allows Authentication Abuse.\n\nTh...", "creation_timestamp": "2026-07-02T15:31:29.483158Z"}, {"uuid": "3076a30f-e86e-4ed3-a51e-9ad35b47e3f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4767", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mpofn66j252j", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-4767](https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0487)\nMissing auth...\nhttps://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0487 #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-07-02T15:59:57.246063Z"}, {"uuid": "e65c0b41-c94d-4bcf-bcdc-2beed2751e8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47897", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mppf2vbry22c", "content": "CVE-2026-47897: Apache Lucene.Net: Arbitrary file write from malicious server to Lucene.Net.Replicator client", "creation_timestamp": "2026-07-03T01:22:23.622387Z"}, {"uuid": "a3968bfe-6017-44a0-a4e4-9a5f0f43587b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47898", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mppfduifi62z", "content": "CVE-2026-47898: Apache Lucene.Net: XXE vulnerability in Lucene.Net.Analysis.Common PatternParser", "creation_timestamp": "2026-07-03T01:27:24.820884Z"}, {"uuid": "83945fae-ff9a-42c4-a122-c841c6e309a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47896", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mppfmtl25u23", "content": "CVE-2026-47896: Apache Lucene.Net: Unauthenticated arbitrary file read on the Lucene.Net.Replicator replication server", "creation_timestamp": "2026-07-03T01:32:26.023454Z"}, {"uuid": "346b6dfd-6b65-4a83-a266-50bd9fce521f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4772", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppnkmjaf22n", "content": "CVE-2026-4772: \u0423\u0433\u0440\u043e\u0437\u0430 XSS-\u0430\u0442\u0430\u043a\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439\n\n\n\nhttps://kripta.biz/posts/9F9C3731-B6D4-4A6F-95E8-3D9285A2F37B", "creation_timestamp": "2026-07-03T03:54:21.141388Z"}, {"uuid": "ac3d8681-3063-4a49-a72f-f0d6c5ff1118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4767", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppnxov22g2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-4767 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 TR7 Cyber Defense: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/193DCDDE-A123-46DF-B380-58836ACD9C9A", "creation_timestamp": "2026-07-03T04:01:39.895076Z"}, {"uuid": "0bf7d5a9-83f7-46f0-bebe-5aee153314e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4770", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppo3dv4ct2o", "content": "CVE-2026-4770: \u0423\u0433\u0440\u043e\u0437\u0430 XSS-\u0430\u0442\u0430\u043a \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439\n\n\n\nhttps://kripta.biz/posts/A5D3D9CB-37A4-4A56-9A4C-73DDDE088355", "creation_timestamp": "2026-07-03T04:03:42.405351Z"}, {"uuid": "c4bd34f3-593b-40cb-bbbd-8f3bdd471199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47898", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpqcsdn5u22o", "content": "CVE-2026-47898 - Apache Lucene.Net: XXE vulnerability in Lucene.Net.Analysis.Common PatternParser\nCVE ID : CVE-2026-47898\n \n Published : July 3, 2026, 7:47 a.m. | 1\u00a0hour, 59\u00a0minutes ago\n \n Description : Improper Restriction of XML External Entity Reference vulnerability in Apa...", "creation_timestamp": "2026-07-03T10:14:28.957889Z"}, {"uuid": "d7ecd875-6a43-45d6-86c4-d3977876f56e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47896", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpqdym2t6v2h", "content": "CVE-2026-47896 - Apache Lucene.Net: Unauthenticated arbitrary file read on the Lucene.Net.Replicator replication server\nCVE ID : CVE-2026-47896\n \n Published : July 3, 2026, 7:48 a.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : Improper Limitation of a Pathname to a Restricted Di...", "creation_timestamp": "2026-07-03T10:35:53.004164Z"}, {"uuid": "03c03dfb-6a19-4d6b-b72e-4f7d2e98f281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47897", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpqekix6hr2a", "content": "CVE-2026-47897 - Apache Lucene.Net: Arbitrary file write from malicious server to Lucene.Net.Replicator client\nCVE ID : CVE-2026-47897\n \n Published : July 3, 2026, 7:48 a.m. | 1\u00a0hour, 59\u00a0minutes ago\n \n Description : Improper Limitation of a Pathname to a Restricted Directory (...", "creation_timestamp": "2026-07-03T10:45:53.430122Z"}, {"uuid": "c1e65bb9-84b2-4fc2-ac32-b24423fc88da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47262", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqneqxtvk2j", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-47262 \u0432 containerd: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/A89CFB5F-2AD9-4816-ABDE-8AB7D39EA7C9", "creation_timestamp": "2026-07-03T13:23:44.121988Z"}, {"uuid": "c9fa1e0f-7970-4e57-a9f4-0d1e07e645a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47429", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mprkoe7q362x", "content": "CVE-2026-47429 - @rootio/vitest\nThe Root vitest package had a vulnerability that could allow an attacker to execute unauthorized code. This could have let a malicious user access or modify sensitive data.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rootio #Rootnpm #CVE #infosec", "creation_timestamp": "2026-07-03T22:08:04.921396Z"}, {"uuid": "6265554e-d59c-4278-986f-d5e711d9c955", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47897", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mprmah5vaj2f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-47897: \u0447\u0442\u043e \u0442\u0430\u043a\u043e\u0435 Path Traversal \u0438 \u043a\u0430\u043a \u0435\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c\n\n\n\nhttps://kripta.biz/posts/517DBE2E-EEE2-4534-8F76-C1C4FA97AEDD", "creation_timestamp": "2026-07-03T22:36:05.610651Z"}, {"uuid": "0998520b-3989-4edd-9caa-6c942c52f91c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47898", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mprmb2vey32c", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-47898 \u0432 Apache Lucene: \u0443\u0433\u0440\u043e\u0437\u0430 XXE \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/DE2301C4-A767-4DE2-9734-B33E32AAD1F6", "creation_timestamp": "2026-07-03T22:36:26.301119Z"}, {"uuid": "7d79c434-d1c3-44cc-b081-9305a3261cf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47896", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mprnkefuly2f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-47896: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043e\u0442 Path Traversal \u0430\u0442\u0430\u043a\n\n\n\nhttps://kripta.biz/posts/43B27DEE-B88E-4E59-80A5-D626AC15EE62", "creation_timestamp": "2026-07-03T22:59:32.089017Z"}, {"uuid": "8af3b12c-0b46-4a21-a38d-f1af0b528511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47898", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mprpze4g5e2k", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-47898 \u0432 Apache Lucene: \u0447\u0442\u043e \u044d\u0442\u043e \u0442\u0430\u043a\u043e\u0435 \u0438 \u043a\u0430\u043a \u0435\u0451 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c\n\n\n\nhttps://kripta.biz/posts/EC95386F-8EFA-40BC-8F41-AF2B5D291037", "creation_timestamp": "2026-07-03T23:43:42.849981Z"}, {"uuid": "5ca52514-aad7-49d5-96bc-1f5072bdd295", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47896", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mprqd5l6yx23", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-47896: \u0447\u0442\u043e \u0442\u0430\u043a\u043e\u0435 Path Traversal \u0438 \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443\n\n\n\nhttps://kripta.biz/posts/705B41B1-BD17-4A32-BAA2-BB3A7409849B", "creation_timestamp": "2026-07-03T23:49:11.252331Z"}, {"uuid": "9d64f3e8-a5a9-4dbb-a7d8-9f7d96b84488", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47932", "type": "seen", "source": "https://bsky.app/profile/smit-artem.bsky.social/post/3mps27elta72f", "content": "Heads up: an important security fix just landed for Adobe Coldfusion. Open its settings and let it update. A couple of taps now keeps your data safer. CVE-2026-47932", "creation_timestamp": "2026-07-04T02:46:02.047307Z"}, {"uuid": "498fecbb-51e6-4b0b-b602-650d8df8d0ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47928", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mpuccpmyuk2l", "content": "\u300cAdobe ColdFusion\u300d\u306b\u7dca\u6025\u6027\u9ad8\u3044\u8106\u5f31\u6027 - \u65e9\u6025\u306b\u5bfe\u5fdc\u3092\n\n\u300cAdobe ColdFusion\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3002Adobe\u3067\u306f\u65e9\u6025\u306b\u5bfe\u7b56\u3092\u8b1b\u3058\u308b\u3088\u3046\u5229\u7528\u8005\u306b\u6ce8\u610f\u3092\u547c\u3073\u304b\u3051\u3066\u3044\u308b\u3002\n\n...\n\n\u5177\u4f53\u7684\u306b\u306f\u3001\u5165\u529b\u691c\u8a3c\u306e\u4e0d\u5099\u306b\u3088\u308a\u4efb\u610f\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u3068\u306a\u308b\u8106\u5f31\u6027\u300cCVE-2026-47928\u300d\u3092\u306f\u3058\u3081\u3001\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u306b\u3088\u308a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u6a5f\u80fd\u304c\u30d0\u30a4\u30d1\u30b9\u3055\u308c\u308b\u300cCVE-2026-47932\u300d\u3001\u8a8d\u53ef\u51e6\u7406\u306e\u4e0d\u5099\u306b\u3088\u308a\u6a29\u9650\u6607\u683c\u304c\u751f\u3058\u308b\u300cCVE-2026-47929\u300d\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3002\n#\u30d1\u30c3\u30c1\u30c1\u30e5\u30fc\u30ba\u30c7\u30fc", "creation_timestamp": "2026-07-05T00:16:23.191731Z"}, {"uuid": "ebfdde0f-1d97-43db-91d2-0a43f468cea7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47932", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mpuccpmyuk2l", "content": "\u300cAdobe ColdFusion\u300d\u306b\u7dca\u6025\u6027\u9ad8\u3044\u8106\u5f31\u6027 - \u65e9\u6025\u306b\u5bfe\u5fdc\u3092\n\n\u300cAdobe ColdFusion\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3002Adobe\u3067\u306f\u65e9\u6025\u306b\u5bfe\u7b56\u3092\u8b1b\u3058\u308b\u3088\u3046\u5229\u7528\u8005\u306b\u6ce8\u610f\u3092\u547c\u3073\u304b\u3051\u3066\u3044\u308b\u3002\n\n...\n\n\u5177\u4f53\u7684\u306b\u306f\u3001\u5165\u529b\u691c\u8a3c\u306e\u4e0d\u5099\u306b\u3088\u308a\u4efb\u610f\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u3068\u306a\u308b\u8106\u5f31\u6027\u300cCVE-2026-47928\u300d\u3092\u306f\u3058\u3081\u3001\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u306b\u3088\u308a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u6a5f\u80fd\u304c\u30d0\u30a4\u30d1\u30b9\u3055\u308c\u308b\u300cCVE-2026-47932\u300d\u3001\u8a8d\u53ef\u51e6\u7406\u306e\u4e0d\u5099\u306b\u3088\u308a\u6a29\u9650\u6607\u683c\u304c\u751f\u3058\u308b\u300cCVE-2026-47929\u300d\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3002\n#\u30d1\u30c3\u30c1\u30c1\u30e5\u30fc\u30ba\u30c7\u30fc", "creation_timestamp": "2026-07-05T00:16:23.229346Z"}, {"uuid": "ff20db02-5e01-4417-a554-195f0f4e481c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47929", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mpuccpmyuk2l", "content": "\u300cAdobe ColdFusion\u300d\u306b\u7dca\u6025\u6027\u9ad8\u3044\u8106\u5f31\u6027 - \u65e9\u6025\u306b\u5bfe\u5fdc\u3092\n\n\u300cAdobe ColdFusion\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3002Adobe\u3067\u306f\u65e9\u6025\u306b\u5bfe\u7b56\u3092\u8b1b\u3058\u308b\u3088\u3046\u5229\u7528\u8005\u306b\u6ce8\u610f\u3092\u547c\u3073\u304b\u3051\u3066\u3044\u308b\u3002\n\n...\n\n\u5177\u4f53\u7684\u306b\u306f\u3001\u5165\u529b\u691c\u8a3c\u306e\u4e0d\u5099\u306b\u3088\u308a\u4efb\u610f\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u3068\u306a\u308b\u8106\u5f31\u6027\u300cCVE-2026-47928\u300d\u3092\u306f\u3058\u3081\u3001\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u306b\u3088\u308a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u6a5f\u80fd\u304c\u30d0\u30a4\u30d1\u30b9\u3055\u308c\u308b\u300cCVE-2026-47932\u300d\u3001\u8a8d\u53ef\u51e6\u7406\u306e\u4e0d\u5099\u306b\u3088\u308a\u6a29\u9650\u6607\u683c\u304c\u751f\u3058\u308b\u300cCVE-2026-47929\u300d\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3002\n#\u30d1\u30c3\u30c1\u30c1\u30e5\u30fc\u30ba\u30c7\u30fc", "creation_timestamp": "2026-07-05T00:16:23.263517Z"}, {"uuid": "d3a58e84-031e-4a80-a216-3eca720662b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47938", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mpueqqavv22l", "content": "Adobe\u306e\u30de\u30fc\u30b1\u30c6\u30a3\u30f3\u30b0\u7ba1\u7406\u88fd\u54c1\u306bRCE\u8106\u5f31\u6027 - \u7dca\u6025\u5bfe\u5fdc\u3092\n\nAdobe\u306f\u3001\u30de\u30fc\u30b1\u30c6\u30a3\u30f3\u30b0\u30ad\u30e3\u30f3\u30da\u30fc\u30f3\u7ba1\u7406\u88fd\u54c1\u300cAdobe Campaign Classic\uff08ACC\uff09\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3068\u3057\u3066\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\n\n\u540c\u793e\u306f\u73fe\u5730\u6642\u95936\u67089\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u3001\u8106\u5f31\u60272\u4ef6\u300cCVE-2026-48303\u300d\u300cCVE-2026-47938\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\n\n\u8a8d\u53ef\u51e6\u7406\u306e\u4e0d\u5099\u306b\u8d77\u56e0\u3057\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002\u3044\u305a\u308c\u3082Windows\u3001Linux\u74b0\u5883\u304c\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3002\n#\u30d1\u30c3\u30c1\u30c1\u30e5\u30fc\u30ba\u30c7\u30fc", "creation_timestamp": "2026-07-05T01:00:01.910527Z"}, {"uuid": "11072dbb-4f82-4913-a055-b7d18272ee85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47291", "type": "seen", "source": "https://gist.github.com/alon710/3857e96eb1a5fc647ae4f1afa6b9f61c", "content": "# CVE-2026-47291: CVE-2026-47291: Remote Code Execution in Windows HTTP.sys Kernel Driver\n\n> **CVSS Score:** 9.8\n> **Published:** 2026-06-09\n> **Full Report:** https://cvereports.com/reports/CVE-2026-47291\n\n## Summary\nAn integer overflow vulnerability in the Windows kernel-mode HTTP driver (HTTP.sys) allows an unauthenticated remote attacker to execute arbitrary code with kernel privileges or cause a Denial of Service via a specially crafted sequence of HTTP request headers.\n\n## TL;DR\nUnauthenticated remote code execution (RCE) in Windows HTTP.sys via integer overflow in header capacity allocation.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-190, CWE-122\n- **Attack Vector**: Network (Unauthenticated)\n- **CVSS Score**: 9.8 (Critical)\n- **EPSS Score**: 0.21506 (21.51%)\n- **Impact**: Remote Code Execution (Ring 0 / SYSTEM)\n- **Exploit Status**: PoC Available / Actively Traded\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Windows 10\n- Windows 11\n- Windows Server 2012\n- Windows Server 2012 R2\n- Windows Server 2016\n- Windows Server 2019\n- Windows Server 2022\n- Windows Server 2025\n- **Windows 10**: < 10.0.14393.9234 (Fixed in: `10.0.14393.9234`)\n- **Windows 11**: < 10.0.22631.7219 (Fixed in: `10.0.22631.7219`)\n- **Windows Server 2022**: < 10.0.20348.5256 (Fixed in: `10.0.20348.5256`)\n- **Windows Server 2025**: < 10.0.26100.32995 (Fixed in: `10.0.26100.32995`)\n\n## Mitigation\n\n- Apply June 2026 cumulative Windows security update\n- Deploy Web Application Firewall (WAF) or reverse proxy to restrict maximum header count and size\n- Configure IIS registry limits for maximum request header lengths\n\n**Remediation Steps:**\n1. Locate the appropriate KB update package matching your Windows Server or Windows client build version.\n2. Initiate installation of the cumulative update package on all targeted systems.\n3. Reboot host endpoints to ensure the updated HTTP.sys kernel driver is loaded successfully.\n4. In non-patchable environments, configure HKLM\\System\\CurrentControlSet\\Services\\HTTP\\Parameters with restricted MaxFieldLength values.\n\n## References\n\n- [Microsoft Security Update Guide](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47291)\n- [CVE Record Details](https://www.cve.org/CVERecord?id=CVE-2026-47291)\n- [dhmosfunk GitHub Repository](https://github.com/dhmosfunk/CVE-2026-49160-CVE-2026-47291-HTTP.sys)\n- [ManagerEmpty GitHub Repository](https://github.com/ManagerEmpty/CVE-2026-47291-httpsys)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-47291) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-06T07:58:48.825234Z"}, {"uuid": "6857c9eb-f73c-4caa-bec5-17a957ffd095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47702", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msszfxkjjc27", "content": "CVE-2026-47702 - typebot.io\nTypeBot stores API tokens in plain text, which could be accessed by unauthorized users if they gain access to the database. This allows them to impersonate users without a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#typebotio #baptistearno #CVE #infosec", "creation_timestamp": "2026-08-11T16:20:04.490563Z"}, {"uuid": "831f4dcd-5d2b-4582-b11b-697cd39b25fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47774", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mpybw7ndmy2r", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-47774](https://github.com/envoyproxy/envoy/security/advisories/GHSA-22m2-hvr2-xqc8)\nEnv...\nhttps://github.com/envoyproxy/envoy/security/advisories/GHSA-22m2-hvr2-xqc8 #PatchManagement #Vulnerability #CVE", "creation_timestamp": "2026-07-06T14:20:05.125549Z"}, {"uuid": "b16252c3-254b-445c-bbc1-b09e5d52c694", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47932", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3mt5k6yznqy22", "content": "A critical-severity fix just shipped for Adobe Coldfusion. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-47932", "creation_timestamp": "2026-08-15T20:47:01.754854Z"}, {"uuid": "74685379-cae0-4fc7-85cb-bdcc62c097a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47646", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq6dpjhglw25", "content": "CVE-2026-47646 - dynamics 365 customer voice\nDynamics 365 Customer Voice has a security flaw that could allow an attacker to pretend to be someone else, potentially tricking users into giving away sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "creation_timestamp": "2026-07-09T00:08:04.393911Z"}, {"uuid": "ca9b25f5-fc90-4e73-858a-c5553974bcbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47627", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mti2fpqgus2e", "content": "NVIDIA Triton vulnerability CVE-2026-47627 scores CVSS 9.8. Learn how the denial of service flaw works and why you must update to version 26.06 now.\n\n#NVIDIA #TritonInferenceServer #CVE202647627 #DenialOfService #AIsecurity #CVSS", "creation_timestamp": "2026-08-20T01:03:50.006623Z"}, {"uuid": "8fe39609-61cb-4524-ba05-f761f14a6bcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47646", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq6gzfcvia2x", "content": "CVE-2026-47646 - Dynamics 365 Customer Voice Spoofing Vulnerability\nCVE ID : CVE-2026-47646\n \n Published : July 8, 2026, 11:24 p.m. | 24\u00a0minutes ago\n \n Description : None\n \n Severity: 9.3 | CRITICAL\n \n Visit the link for more details, such as CVSS details, affected products, t...", "creation_timestamp": "2026-07-09T01:07:16.802608Z"}, {"uuid": "3753d823-ea3e-496b-8450-a20b405e0df0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47335", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-09T01:15:40.518712Z"}, {"uuid": "ef4f9a6b-4012-45be-8f9c-047b3c5a8fa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://t.me/GithubRedTeam/97908", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a OmriBaso\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C#\n\u2b50 Star\u6570\u91cf\uff1a 4  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-13 14:50:06\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path traversal, certificate verification bypass, and DLL hijacking to achieve SYSTEM-level code execution.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-13T16:00:03.636914Z"}, {"uuid": "5c93f661-b437-4c54-841d-90abe6c769cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47331", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-09T01:15:38.249782Z"}, {"uuid": "cf684c4c-0639-4447-8d38-bb9c671d2080", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47336", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-09T01:15:42.766016Z"}, {"uuid": "e0a9ffdd-d818-4aff-bc4a-e111dde8ec39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47646", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mq6qpmz7ou2d", "content": "\ud83d\udd34 CVE-2026-47646 - Critical (9.3)\n\nImproper neutralization of input during web page generation ('cross-site scripting') in Dynamics ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47646/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-09T04:00:48.227785Z"}, {"uuid": "a5d598b7-3746-4d37-adfa-7b0fcfe0a8e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47299", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:56.572286Z"}, {"uuid": "83693f1c-283f-4b32-b789-3ec3447e922a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47208", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq756v3wlu2w", "content": "CVE-2026-47208 - @rootio/vm2\nThe @rootio/vm2 package for Root:npm was previously vulnerable, but Root has since released a patch. Update to a fixed version to prevent potential security risks. Multiple\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rootio #Rootnpm #CVE #infosec", "creation_timestamp": "2026-07-09T07:44:03.453256Z"}, {"uuid": "fd11c8de-5237-4b80-98fd-ca4c4f595276", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47140", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq756vsjxn24", "content": "CVE-2026-47140 - @rootio/vm2\nA security patch has been released for the Root VM2 package. This update is important for users of Root's npm package to protect against potential security risks. You should check\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rootio #Rootnpm #CVE #infosec", "creation_timestamp": "2026-07-09T07:44:04.110917Z"}, {"uuid": "051740ef-c1b7-41f3-bcd0-d062d51adc64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47131", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq75jnrniv24", "content": "CVE-2026-47131 - @rootio/vm2\nThe Root:npm vm2 package had a security flaw that could allow an attacker to execute malicious code on a server. This could lead to unauthorized access or data theft. Root has\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rootio #Rootnpm #CVE #infosec", "creation_timestamp": "2026-07-09T07:50:05.789648Z"}, {"uuid": "aeb37a58-3593-488b-aa85-e65e994eab95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47137", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq75n7h44f2r", "content": "CVE-2026-47137 - @rootio/vm2\nThe Root VM2 software has a security issue that could allow unauthorized access. This issue affects users who rely on the software for secure operations. To stay secure, update to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rootio #Rootnpm #CVE #infosec", "creation_timestamp": "2026-07-09T07:52:04.189920Z"}, {"uuid": "0544c5fc-cf8e-4247-a568-d073cb5595bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47210", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq75qrj6f72v", "content": "CVE-2026-47210 - @rootio/vm2\nThe @rootio/vm2 package in Root:npm contains a security issue that could allow attackers to execute malicious code on virtual machines. This is a concern because it could be used\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rootio #Rootnpm #CVE #infosec", "creation_timestamp": "2026-07-09T07:54:04.295363Z"}, {"uuid": "06798049-8503-4c16-bb27-ec7f4edb2d6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47840", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq75qsv2b42w", "content": "CVE-2026-47840\nAn attacker positioned between UAA and an LDAP directory can impersonate the directory, steal user passwords, and gain admin access. This affects older versions of UAA and Cf-deployment that use LDAP over\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-09T07:54:05.000290Z"}, {"uuid": "5d920107-383a-4269-994b-9ad662da5d2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47826", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq7725o5kx2x", "content": "CVE-2026-47826 - blobs.yaml Path Traversal Allows File Writes\nCVE ID : CVE-2026-47826\n \n Published : July 9, 2026, 7:16 a.m. | 32\u00a0minutes ago\n \n Description : The blobs.yml path key traversal vulnerability in the BOSH CLI tool allows an attacker to write arbitrary files and ex...", "creation_timestamp": "2026-07-09T08:17:12.149811Z"}, {"uuid": "ce3b2733-64b7-4b02-888c-ced3200e6e73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47829", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq77krzyza2e", "content": "CVE-2026-47829 - Argument Injection in BOSH CLI Allows Local Command Execution on Operator Workstations via Compromised Director\nCVE ID : CVE-2026-47829\n \n Published : July 9, 2026, 7:16 a.m. | 32\u00a0minutes ago\n \n Description : Argument Injection in bosh-cli allows a compromised...", "creation_timestamp": "2026-07-09T08:26:30.575618Z"}, {"uuid": "607fb77d-818e-47f4-b54f-1ca96f8327f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47830", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq77tqjgfr27", "content": "CVE-2026-47830 - Incorrect Permission Assignment Allows Local Privilege Escalation to SYSTEM via Executable Overwrite\nCVE ID : CVE-2026-47830\n \n Published : July 9, 2026, 7:16 a.m. | 32\u00a0minutes ago\n \n Description : Incorrect Permission Assignment in BOSH.Utils.psm1 in BOSH-Eco...", "creation_timestamp": "2026-07-09T08:31:31.996160Z"}, {"uuid": "9dc979be-ae9b-4237-9f3a-1d40c843131e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47828", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq7a4pl3ul2k", "content": "CVE-2026-47828 - Missing TLS Certificate Verification in BOSH CLI Allows Root Code Execution via Man-in-the-Middle Credential Replay\nCVE ID : CVE-2026-47828\n \n Published : July 9, 2026, 7:16 a.m. | 32\u00a0minutes ago\n \n Description : During bosh create-env and bosh delete-env, the...", "creation_timestamp": "2026-07-09T08:36:31.927467Z"}, {"uuid": "60a009e7-10da-49b0-97d8-f002e784826d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47840", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq7afnzxnt27", "content": "CVE-2026-47840 - LDAP StartTLS unconditionally disables hostname verification\nCVE ID : CVE-2026-47840\n \n Published : July 9, 2026, 7:16 a.m. | 32\u00a0minutes ago\n \n Description : A network attacker positioned between UAA and its LDAP directory can impersonate the directory using a...", "creation_timestamp": "2026-07-09T08:41:32.170956Z"}, {"uuid": "55caf27e-a7a7-40f9-800c-a2b3eba6a8da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47831", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq7aomhpfa2q", "content": "CVE-2026-47831 - Cryptographically Weak Password Generation in bosh-windows-stemcell-builder Allows Remote SSH Brute-Force Attacks\nCVE ID : CVE-2026-47831\n \n Published : July 9, 2026, 7:16 a.m. | 32\u00a0minutes ago\n \n Description : Use of a cryptographically weak random number gen...", "creation_timestamp": "2026-07-09T08:46:32.784059Z"}, {"uuid": "5b14716b-efe5-40da-bda9-49a6c143421e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47896", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mq7btfocc22k", "content": "\ud83d\udccc CVE-2026-47896 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Lucene.Net (Lucene.Net.Replicator library).\n\nTh... https://www.cyberhub.blog/cves/CVE-2026-47896", "creation_timestamp": "2026-07-09T09:07:07.137937Z"}, {"uuid": "9036b66a-eeaf-42e7-b9d3-32388982faae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47897", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mq7dj22hj52n", "content": "\ud83d\udccc CVE-2026-47897 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Lucene.Net (Lucene.Net.Replicator library).\n\nTh... https://www.cyberhub.blog/cves/CVE-2026-47897", "creation_timestamp": "2026-07-09T09:37:06.979091Z"}, {"uuid": "b5426c8d-a7a6-42a7-9c35-c845f8dbadb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47285", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:26.816518Z"}, {"uuid": "f3f6a214-ec39-4ace-b715-7ffe6f94e458", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3msy2syzrtt25", "content": "Squidbleed (CVE-2026-47729) - Heartbleed-style vulnerability that leaks internal memory from every version of Squid Proxy, in its default configuration", "creation_timestamp": "2026-08-13T16:28:34.584391Z"}, {"uuid": "63ad234f-5864-410c-a4ac-1d140306a61c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47826", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqa4dzxgrg2n", "content": "CVE-2026-47826 - Path Traversal in BOSH CLI allows arbitrary file write & data exfil. CVSS 8.8. No patch available yet. Mitigate immediately. #CVE #BOSH #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-47826/", "creation_timestamp": "2026-07-09T17:01:42.701237Z"}, {"uuid": "1b71d966-2892-4b4e-8f75-0c39c4aadf04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47826", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqa5j7vw562i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-47826 \u0432 BOSH CLI: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/45031AC0-417B-4A29-844F-B16617923ABC", "creation_timestamp": "2026-07-09T17:22:30.023353Z"}, {"uuid": "188c65b0-b27f-4a30-b315-6d1c3714dbfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47826", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mqa5jbhusp2m", "content": "\u6df1\u5ea6\u89e3\u6790BOSH CLI\u5de5\u5177\u4e2d\u7684blobs.yml\u8def\u5f84\u952e\u904d\u5386\u6f0f\u6d1e(CVE-2026-47826)\u53ca\u5176\u5b89\u5168\u9632\u62a4\u7b56\u7565\n\n\n\nhttps://qian.cx/posts/B14DD815-AD6C-4955-A161-91A12C1F0B52", "creation_timestamp": "2026-07-09T17:22:31.616927Z"}, {"uuid": "39bba542-3fda-403f-96a0-b61ef4232c7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47830", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqa5romrgp2f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-47830: \u041e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0438 \u043f\u0440\u0430\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 BOSH.Utils.psm1\n\n\n\nhttps://kripta.biz/posts/686355A0-272D-40AC-B9AD-515BB9AA779E", "creation_timestamp": "2026-07-09T17:27:16.892341Z"}, {"uuid": "a335d008-04db-4528-9a46-b7ab68ddd966", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47829", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqa6blpc522y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-47829 \u0432 bosh-cli: \u0443\u0433\u0440\u043e\u0437\u0430 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043d\u043e\u0439 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0438 \u0435\u0451 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\n\n\n\nhttps://kripta.biz/posts/775901EF-1359-4C3A-B596-F74C3D3B6915", "creation_timestamp": "2026-07-09T17:36:07.811899Z"}, {"uuid": "5e14d891-371e-482c-a6f3-87ae20667a34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47831", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqa6cspnal2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-47831: \u0441\u043b\u0430\u0431\u044b\u0439 \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b \u0432 GenerateRandomPassword\n\n\n\nhttps://kripta.biz/posts/F870CB61-164C-455A-A56C-42B2AB78E565", "creation_timestamp": "2026-07-09T17:36:49.226862Z"}, {"uuid": "f04c84db-a90c-4d27-b53b-d9391fcb3248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47840", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqa6dvypr42a", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-47840: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 UAA \u0438 LDAP\n\n\n\nhttps://kripta.biz/posts/C76A2685-DAF7-4389-B77A-C71731754626", "creation_timestamp": "2026-07-09T17:37:25.535972Z"}, {"uuid": "b4f573eb-e463-4d5f-80ba-95e50cf6a0c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47828", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqa6kux2d326", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-47828 \u0432 BOSH: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0438 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0439\n\n\n\nhttps://kripta.biz/posts/2ECC9B37-F708-4337-8789-A47D922CD26F", "creation_timestamp": "2026-07-09T17:41:19.370350Z"}, {"uuid": "7210c941-ec78-44c4-b9dc-8e255fc2a7cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47291", "type": "seen", "source": "https://infosec.exchange/users/thezdi/statuses/116892908530062926", "content": "Our research team is back looking at CVE-2026-47291 - a CVSS 9.8 RCE bug in #Windows HTTP.sys. They show root cause and look at why detection may be just as hard as exploitation. https://www.zerodayinitiative.com/blog/2026/7/9/cve-2026-47291-remote-code-execution-in-the-windows-httpsys", "creation_timestamp": "2026-07-10T00:43:54.739660Z"}, {"uuid": "d88aa3ad-9615-407c-b395-8055c8f09a69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47291", "type": "seen", "source": "https://infosec.exchange/users/thezdi/statuses/116892909083022180", "content": "Our research team is back looking at CVE-2026-47291 - a CVSS 9.8 RCE bug in #Windows HTTP.sys. They show root cause and look at why detection may be just as hard as exploitation. https://www.zerodayinitiative.com/blog/2026/7/9/cve-2026-47291-remote-code-execution-in-the-windows-httpsys", "creation_timestamp": "2026-07-10T00:44:03.171266Z"}, {"uuid": "5ecd1f00-a593-421e-bfb3-8079423f6a09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47291", "type": "seen", "source": "https://infosec.exchange/users/thezdi/statuses/116892909484864115", "content": "Our research team is back looking at CVE-2026-47291 - a CVSS 9.8 RCE bug in #Windows HTTP.sys. They show root cause and look at why detection may be just as hard as exploitation. https://www.zerodayinitiative.com/blog/2026/7/9/cve-2026-47291-remote-code-execution-in-the-windows-httpsys", "creation_timestamp": "2026-07-10T00:44:09.236721Z"}, {"uuid": "cdb875d7-0ad3-445e-bccd-83c014b94543", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47291", "type": "seen", "source": "https://infosec.exchange/users/thezdi/statuses/116892910291096161", "content": "Our research team is back looking at CVE-2026-47291 - a CVSS 9.8 RCE bug in #Windows HTTP.sys. They show root cause and look at why detection may be just as hard as exploitation. https://www.zerodayinitiative.com/blog/2026/7/9/cve-2026-47291-remote-code-execution-in-the-windows-httpsys", "creation_timestamp": "2026-07-10T00:44:21.752462Z"}, {"uuid": "f53da7fb-b298-4c12-94e9-3826c66d5737", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47646", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqbev5y6au2f", "content": "\ud83d\udccc CVE-2026-47646 - Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Customer Voice allows an unauthorized attacker to... https://www.cyberhub.blog/cves/CVE-2026-47646", "creation_timestamp": "2026-07-10T05:07:06.869769Z"}, {"uuid": "a9267faa-861d-419e-9fd3-8215551f64ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47291", "type": "seen", "source": "https://infosec.exchange/users/thezdi/statuses/116896058625252567", "content": "Our research team is back looking at CVE-2026-47291 - a CVSS 9.8 RCE bug in #Windows HTTP.sys. They show root cause and look at why detection may be just as hard as exploitation. https://www.zerodayinitiative.com/blog/2026/7/9/cve-2026-47291-remote-code-execution-in-the-windows-httpsys", "creation_timestamp": "2026-07-10T14:05:01.335300Z"}, {"uuid": "bdc1026a-6672-4b56-a477-da2335147868", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47291", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mqcdhwmphf2u", "content": "CVE-2026-47291 enables remote unauthenticated exploitation of HTTP.sys via crafted HTTP requests, potentially causing denial-of-service or kernel-privileged code execution.\n", "creation_timestamp": "2026-07-10T14:14:29.364855Z"}, {"uuid": "a6bfa217-3e35-4eed-ae0e-14669120552a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47291", "type": "seen", "source": "https://bsky.app/profile/thezdi.bsky.social/post/3mqcgwmxlf22m", "content": "Our research team is back looking at CVE-2026-47291 - a CVSS 9.8 RCE bug in #Windows HTTP.sys. They show root cause and look at why detection may be just as hard as exploitation. www.zerodayinitiative.com/blog/2026/7/...", "creation_timestamp": "2026-07-10T15:16:29.179026Z"}, {"uuid": "e8b886f2-73d6-4385-8a1b-994b43ab1957", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47291", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mqch5p5drs2n", "content": "CVE-2026-47291: Remote Code Execution in the Windows HTTP.sys\n\nwww.zerodayinitiative.com/blog/2026/7/...\n\n#Cybersecurity #ThreatIntel #Vulnerability", "creation_timestamp": "2026-07-10T15:20:23.123775Z"}, {"uuid": "36dbc738-b6b2-433e-8261-aba88b5b8b29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47291", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/9/cve-2026-47291-remote-code-execution-in-the-windows-httpsys", "content": "In this excerpt of a TrendAI Research Services vulnerability report, Yazhi Wang and Jonathan Lein of the TrendAI Research team detail a recently patched remote code execution bug in the Windows HTTP protocol stack. Successful exploitation of this vulnerability can result in a denial-of-service condition, or, in the worst case, code execution with kernel privileges. The following is a portion of their write-up covering CVE-2026-47291, with a few minimal modifications.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n  \nA remote code execution vulnerability exists in the HTTP Protocol Stack for Microsoft Internet Information Services implemented in HTTP.sys. The vulnerability is due to invalid validating incoming HTTP requests. \nA remote, unauthenticated attacker can exploit this vulnerability by sending crafted HTTP packets to the target system. Successful exploitation of this vulnerability can result in a denial-of-service condition, or, in the worst case, code execution with kernel privileges.\nThe Vulnerability\nHTTP.sys is the kernel-mode HTTP protocol driver in Microsoft Windows. It provides HTTP request parsing, response caching, and SSL/TLS termination for Internet Information Services (IIS) and other applications that register URL prefixes. The driver listens on configured TCP ports (commonly 80 for HTTP and 443 for HTTPS) and processes inbound HTTP/1.x and HTTP/2 requests at the kernel level.\nWhen operating over HTTPS, HTTP.sys delegates TLS processing to the Windows Secure Channel (SChannel) provider. Inbound TCP data is decrypted on a per-record basis: each TLS record constitutes an independent unit of encryption and is decrypted separately by SChannel before being delivered to HTTP.sys as a distinct plaintext buffer. A single TLS 1.3 application data record has the following structure:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n  \n    \n    \n      \n        \n        \n        \n        \n          \n        \n        \n        \n      \n    \n  \n  \n\n\n\n\n\n\n  \nThe decrypted payload of each TLS record is delivered independently to the HTTP parser via\nUlHttpBufferReceiveEvent(), regardless of how many TLS records the underlying TCP connection coalesces into a single TCP segment. This behavior is distinct from plaintext HTTP connections, where the Windows TCP stack coalesces multiple segments into a single receive indication before the data reaches HTTP.sys.\nThe HTTP parser maintains a per-request state object that includes a dynamically grown buffer reference array. The capacity field stores the current number of allocated slots in the buffer reference array. The count field stores the number of slots currently in use. The ref_array_ptr field points to the dynamically allocated array of 8-byte buffer reference entries.\nAn integer overflow vulnerability exists in HTTP.sys. The vulnerability is due to insufficient bounds checking when growing a buffer reference array during HTTP/1.x header parsing. When HTTP.sys receives data for an HTTP/1.x request, it allocates a UL_REQUEST_BUFFER structure for each receive indication and tracks these buffers in the per-request reference array described above. The count field records the number of active buffer references, and the capacity field records the total number of allocated slots. \nAs the HTTP parser (UlpParseNextRequest()) processes header lines, it calls an inline buffer reference routine each time a new receive buffer is consumed. When count reaches capacity, the routine grows the array by reallocating it with five additional slots. The new allocation size is computed as 0x28 + capacity * 8, the contents of the existing array are copied via memmove using count * 8 as the copy length, and capacity is incremented by 5 as a 16-bit unsigned integer addition. No overflow check is performed on this addition.\nAfter 13,107 growth events, capacity reaches 0xFFFB. The next growth adds 5, producing 0x10000, which truncates to 0x0000 in the 16-bit field. On the subsequent buffer reference addition, count (which is now 65,536 or greater) exceeds the zero capacity, triggering another growth. The allocation size computation 0x28 + 0 * 8 produces a 40-byte allocation, but the memmove copies count * 8 bytes (approximately 524,256 bytes) from the old buffer into the 40-byte allocation. This results in a kernel pool heap buffer overflow of over 500 kilobytes.\nEach buffer reference corresponds to one receive buffer delivered to the HTTP parser. For plaintext HTTP connections, the Windows TCP stack coalesces received segments into large indications, and UlpMergeBuffers() further combines buffers within HTTP.sys. Over TLS connections, each TLS record is decrypted independently by SChannel and delivered as a separate buffer through UlHttpBufferReceiveEvent() into UlpCopyIndicatedData(). If each TLS record contains exactly one complete header line (terminated by CRLF), the HTTP parser fully consumes the buffer without setting the partial-parse flag, causing UlpAdjustBuffers() to advance to the next buffer via its non-merge path. This creates a 1:1 correspondence between TLS records sent and buffer references accumulated.\nTo trigger the overflow, an attacker crafts an HTTP request in which each header line is encapsulated in a separate TLS application data record. Given a minimum header line size of approximately 4 bytes and a required count of 65,536 buffer references, the total request size comes to roughly 262,144 bytes. The MaxRequestBytes registry value (at HKLM\\SYSTEM\\CurrentControlSet\\Services\\HTTP\\Parameters) must be configured to a value of at least 262,144 bytes for the server to accept a request of this size. The default value of 16,384 bytes limits the request to approximately 4000 header lines, which is insufficient to trigger the overflow. As a mitigation, keeping MaxRequestBytes at or below 65,535 bytes represents the most conservative configuration to prevent this attack.\nA remote unauthenticated attacker could exploit this vulnerability by sending a specially crafted HTTP/1.x request over a TLS connection to an affected server. Successful exploitation results in unexpected system termination due to a memory access exception in the context of the kernel. Under specific memory layout conditions, exploitation could result in arbitrary code execution in the context of the kernel.\nNotes:\n\u2022 The vulnerability is only reachable through HTTP/1.x header parsing over TLS connections. HTTP/2 and HTTP/3 use different parser paths that do not interact with the buffer reference array.\n\u2022 Body data parsing (Content-Length or chunked transfer encoding) does not add entries to the buffer reference array. Only header parsing triggers buffer reference growth.\n\u2022 At a sending rate of 10 milliseconds per TLS record, the overflow requires approximately 11 minutes to trigger.\nSource Code Walkthrough\nThe following code snippet was taken from HTTP.sys version 10.0.26100.7705. Comments added by TrendAI Research have been highlighted.\nIn UlpParseNextRequest():\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n  \n    \n    \n      \n        \n        \n        \n        \n          \n        \n        \n        \n      \n    \n  \n  \n\n\n\n\n\n\n  \nDetection Guidance\nTo detect an attack exploiting this vulnerability, the detection device must monitor and parse traffic on the TCP port 443.\nThe traffic on the affected port(s) is TLS-encrypted. The detection device must be able to decrypt the TLS traffic before applying the following detection method. The detection device should monitor for HTTPS connections.\nAn HTTP/1.x request [1] consists of a request line followed by zero or more header field lines, each terminated by CRLF. The following grammar defines the relevant structure:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n  \n    \n    \n      \n        \n        \n        \n        \n          \n        \n        \n        \n      \n    \n  \n  \n\n\n\n\n\n\n  \nDecrypted traffic inspection:\nAfter decrypting the TLS session, the detection device must parse the HTTP/1.x request headers. The detection device must count the number of distinct header field lines present in a single HTTP request. If the number of header field lines in a single request exceeds 1,000, the traffic should be considered suspicious; an attack exploiting this vulnerability is likely underway.\nEncrypted traffic heuristics:\nWhere decryption is not available, the detection device should inspect the pattern of TLS application data records within the encrypted session. If each TLS application data record contains a single short payload and the total number of such records on a single connection exceeds 1,000, the traffic should be considered suspicious; an attack exploiting this vulnerability is likely underway.\nNotes:\n\u2022 The preferred detection method (header line count) requires the ability to decrypt TLS traffic, for example through TLS inspection, a decrypting proxy, or possession of the server's private key. This method directly observes the attack indicator and produces low false-positive and false-negative rates.\n\u2022 The TLS record heuristic operates on encrypted traffic and does not require decryption. This method is more prone to false positives (legitimate applications that send many small TLS records, such as interactive streaming sessions, may trigger the heuristic) and to false negatives (the threshold is based on observable record sizes rather than the actual header count that determines exploitability). Where possible, decrypted traffic inspection should be preferred.\n\u2022 The attack requires approximately 11 minutes of sustained connection to accumulate sufficient header lines. Connection duration monitoring may serve as a supplementary detection heuristic.\nConclusion\nThis vulnerability was patched by Microsoft in the June 2026 release cycle. They note several mitigations that include editing the registry to ensure unpatched systems are not vulnerable to exploitation. However, the best method to ensure this bug has been fully remediated is to test and deploy the vendor-supplied patch.\nSpecial thanks to Yazhi Wang and Jonathan Lein of the TrendAI Research team for providing such a thorough analysis of this vulnerability. For an overview of TrendAI Research services, please visit https://go.trendmicro.com/tis/vulnerabilities.html.\nThe threat research team will be back with other great vulnerability analysis reports in the future. Until then, follow the team on Twitter, Mastodon, LinkedIn, or Bluesky for the latest in exploit techniques and security patches.", "creation_timestamp": "2026-07-10T16:01:02.594295Z"}, {"uuid": "4df31260-ad54-40a9-9e56-9fb0e42bdc32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47691", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqckarmtam2z", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-47691 \u0432 Netty: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/B582FC38-17A2-4488-A200-50DD22169788", "creation_timestamp": "2026-07-10T16:15:44.713345Z"}, {"uuid": "1dca4985-25b8-4f96-878c-1e852a9a9ae3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47291", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mqcvyat5xu2b", "content": "Original text: \"CVE-2026-47291: Remote Code Execution in the Windows HTTP.sys\" \u2014 Yazhi Wang and Jonathan Lein, TrendAI Zero Day Initiative (July 10, 2026). Code blocks are reproduced verbatim from the original with attribution caption\nhttps://core-jmp.org/2026/07/cve-2026-47291-rce-windows-http-sys/", "creation_timestamp": "2026-07-10T19:45:43.750528Z"}, {"uuid": "72c5f73a-a4ec-4f2e-bfae-a7590814afd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47422", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdoqvsu4d2x", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-47422 \u0432 Frappe: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/8800789A-C0EB-4BF9-AFBD-CA677E896BD5", "creation_timestamp": "2026-07-11T03:09:01.001165Z"}, {"uuid": "d3b568a6-f0e7-4218-8f5f-551558026952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47199", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdpehqc5c2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-47199 \u0432 Frappe: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/9B9BFDCB-4C6F-4303-9C95-80DA9CC0AE71", "creation_timestamp": "2026-07-11T03:19:57.030865Z"}, {"uuid": "db10efa1-c674-4bed-8069-4a18459f5213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47291", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mqeatgqd3b2n", "content": "CVE-2026-47291: Remote Code Execution in the Windows HTTP.sys\n\n", "creation_timestamp": "2026-07-11T08:32:33.322607Z"}, {"uuid": "4f46d150-0086-4cfa-8b13-45a5b7554167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47705", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mstgt4vsii25", "content": "CVE-2026-47705\nTypeBot's export feature allows attackers to inject malicious spreadsheet formulas into CSV files. If an administrator opens these files in spreadsheet software, the attacker's code can be executed. Update to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-11T20:20:04.466127Z"}, {"uuid": "463ce4bd-6559-42cc-bb56-e5209e0db729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://infosec.exchange/users/obivan/statuses/117089950247916382", "content": "SCCM RCE PoC (CVE-2026-47301) https://github.com/OmriBaso/SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit", "creation_timestamp": "2026-08-13T19:54:12.651712Z"}, {"uuid": "8dd8edb5-003c-40e2-9323-7fa5fab4c7eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3msygctslpar2", "content": "SCCM RCE PoC (CVE-2026-47301) https://github.com/OmriBaso/SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit", "creation_timestamp": "2026-08-13T19:54:24.676142Z"}, {"uuid": "c5d0cc5c-9501-4aba-989f-bd17230459f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47291", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88270", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-47291-httpsys\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ManagerEmpty\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-10 22:06:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nHTTP.sys RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T07:00:04.488948Z"}, {"uuid": "aa1c6e9f-8255-4f88-8fe6-079be66628e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47291", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mqgmkylhgi2c", "content": "[RSS] CVE-2026-47291: Remote Code Execution in the Windows HTTP.sys\n\n\n www.thezdi.com -> \n\n\nOriginal->", "creation_timestamp": "2026-07-12T07:07:54.044648Z"}, {"uuid": "d54daf37-90e3-4cbe-a962-6d3efaf3dfaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47291", "type": "seen", "source": "https://t.me/kasperskyb2b/2210", "content": "\ud83d\udc40 \u0420\u0435\u043a\u043e\u0440\u0434\u043d\u044b\u0439 Patch Tuesday, 3 \u0437\u0438\u0440\u043e\u0434\u0435\u044f, \u0434\u043e\u043b\u0433\u043e\u0436\u0434\u0430\u043d\u043d\u044b\u0435 \u0444\u0438\u043a\u0441\u044b\n\nMicrosoft \u0440\u0430\u0437\u0440\u0430\u0437\u0438\u043b\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c, \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0438\u043c 200 (!) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u042d\u0442\u043e \u0434\u043b\u044f \u0442\u0435\u0445, \u043a\u043e\u043c\u0443 \u043d\u0435 \u0445\u0432\u0430\u0442\u0438\u043b\u043e \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0438\u044e\u043d\u044f 360 (!!) \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u0434\u044b\u0440 \u0432 Edge/Chromium. \u0412\u043e\u043f\u0440\u043e\u0441, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0430\u0441 \u043e\u0441\u0442\u0440\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0443\u0435\u0442 \u2014 \u044d\u0442\u043e \u0442\u0435\u043f\u0435\u0440\u044c \u0442\u0430\u043a \u0431\u0443\u0434\u0435\u0442 \u043a\u0430\u0436\u0434\u044b\u0439 \u043c\u0435\u0441\u044f\u0446, \u0438\u043b\u0438 \u0433\u043e\u0440\u0448\u043e\u0447\u0435\u043a \u0438\u043c\u0435\u043d\u0438 Mythos/MDASH/XBOW \u0432\u0441\u0451 \u0436\u0435 \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u043d\u0435\u0442 \u0432\u0430\u0440\u0438\u0442\u044c \u0441 \u0442\u0430\u043a\u043e\u0439 \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c\u044e?\n\n\u0412\u043f\u0440\u043e\u0447\u0435\u043c, \u0418\u0422-\u0430\u0434\u043c\u0438\u043d\u0430\u043c \u043d\u0435 \u0434\u043e \u0444\u0438\u043b\u043e\u0441\u043e\u0444\u0438\u0438. \u041d\u0443\u0436\u043d\u043e \u0441\u0440\u043e\u0447\u043d\u043e \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0446\u0435\u043b\u0443\u044e \u043f\u0430\u0447\u043a\u0443 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0440\u0438, \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0451\u043d\u043d\u044b\u0435 \u0434\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f. \u0412\u0441\u0435\u0433\u043e \u0432 \u0440\u0435\u043b\u0438\u0437\u0435 32 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 28 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a RCE. \u0412\u0441\u0435\u0433\u043e \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 65 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, 54 \u2014 \u043a \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, 27 \u2014 \u0441\u043f\u0443\u0444\u0438\u043d\u0433\u0443, 26 \u2014 \u0443\u0442\u0435\u0447\u043a\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 18 \u2014 \u043e\u0431\u0445\u043e\u0434\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 7 \u2014 DoS.\n\n\u0421\u0440\u0435\u0434\u0438 \u0442\u0440\u0451\u0445 \u0437\u0438\u0440\u043e\u0434\u0435\u0435\u0432 \u0441\u0430\u043c\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0439 \u0434\u043b\u044f \u043d\u0430\u0441 \u2014 CVE-2026-50507, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0439 \u0441\u043a\u0440\u043e\u043c\u043d\u044b\u0439 CVSS 6.8. \u042d\u0442\u043e \u0444\u0438\u043a\u0441 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 BitLocker \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c YellowKey, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u0440\u0430\u043d\u0435\u0435. \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e, \u0447\u0442\u043e \u0432 \u043c\u0430\u0435 \u043f\u043e\u0434 \u044d\u0442\u043e\u0442 \u0434\u0435\u0444\u0435\u043a\u0442 \u0437\u0430\u0432\u0435\u043b\u0438 CVE-2026-45585, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0433\u0430\u0434\u0430\u0442\u044c, \u0437\u0430\u0447\u0435\u043c \u0432 \u0420\u0435\u0434\u043c\u043e\u043d\u0434\u0435 \u0440\u0435\u0448\u0438\u043b\u0438 \u0437\u0430\u0434\u0443\u0431\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c CVE. Microsoft \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u0438\u0442 \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u043a\u043e\u0435\u0433\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u044d\u0442\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d \u043e\u0431\u0445\u043e\u0434 \u043c\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u043f\u0430\u0442\u0447\u0430, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0435\u0434\u0435\u043b\u044e \u043d\u0430\u0437\u0430\u0434. \n\n\u0414\u0440\u0443\u0433\u043e\u0439 \u0434\u0435\u0444\u0435\u043a\u0442 \u0438\u0437 \u0442\u043e\u0433\u043e \u0436\u0435 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430, GreenPlasma, \u0442\u043e\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2026-45586. \u042d\u0442\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 CTFMON.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u0437\u0438\u0440\u043e\u0434\u0435\u0435\u043c \u0432 \u0438\u044e\u043d\u0435 \u0441\u0442\u0430\u043b\u0430 CVE-2026-49160, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0437 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f HTTP/2 Bomb, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 HTTP.sys. \u041a \u043f\u0430\u0442\u0447\u0443 \u0432 \u043f\u043e\u0434\u0430\u0440\u043e\u043a \u043f\u0440\u0438\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c, \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u044e\u0449\u0438\u0439 \u043a\u0430\u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043d\u043e\u0432\u044b\u043c\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438 \u043f\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044e \u0447\u0438\u0441\u043b\u0430 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u0432 HTTP/2  \u0438 HTTP/3.\n\n\u0421\u0440\u0435\u0434\u0438 200 \u0431\u0430\u0433\u043e\u0432 \u043d\u0430\u0448\u043b\u043e\u0441\u044c \u043c\u0435\u0441\u0442\u043e \u0434\u043b\u044f \u0442\u0440\u0451\u0445 \u0432\u0435\u0441\u044c\u043c\u0430 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u0445 \u00ab\u0447\u0435\u0440\u0432\u0435\u043e\u0431\u0440\u0430\u0437\u043d\u044b\u0445\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u0430\u0436\u0434\u0430\u044f \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0445\u043e\u0441\u0442\u0435 \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041a\u0430\u0436\u0434\u0430\u044f \u043e\u0446\u0435\u043d\u0435\u043d\u0430 \u0432 CVSS 9.8.\n\u0421\u0430\u043c\u0430\u044f \u0441\u043b\u043e\u0436\u043d\u0430\u044f \u2014 CVE-2026-47291 \u0432 HTTP.sys, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043e\u0446\u0435\u043d\u0435\u043d\u0430 \u043a\u0430\u043a \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u0430\u044f, \u0430 \u043f\u0435\u0440\u0435\u0434 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u0442\u0447\u0430 \u043d\u0443\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 MaxRequestBytes \u0443 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 HTTP. \n\u0414\u043b\u044f \u0434\u0432\u0443\u0445 \u0434\u0440\u0443\u0433\u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043e\u0446\u0435\u043d\u0435\u043d\u0430 \u043a\u0430\u043a \u043c\u0435\u043d\u0435\u0435 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u0430\u044f, \u043d\u043e \u044d\u0442\u043e \u0443\u0436 \u043a\u0430\u043a \u043f\u043e\u0432\u0435\u0437\u0451\u0442. CVE-2026-44815 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442 DHCP, \u0430 CVE-2026-45657 \u2014 \u0441\u0430\u043c\u043e \u044f\u0434\u0440\u043e Windows.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #Microsoft @\u041f2\u0422", "creation_timestamp": "2026-07-12T08:00:06.470969Z"}, {"uuid": "e3a89801-cf4f-49d4-8920-24a0829e6e91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47291", "type": "seen", "source": "Telegram/wwVdofcJwkupp7PDZIU-gMeaTsssZaRKnpbUtbShrCNMByI", "content": "", "creation_timestamp": "2026-07-12T08:00:06.640462Z"}, {"uuid": "1fc18c18-1fca-45d5-9275-b252d9ec849d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47865", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msygjmdgt22w", "content": "\u300cVMware Avi Load Balancer\u300d\u306b\u8907\u6570\u8106\u5f31\u6027 - \u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d\u3082\n\nBroadcom\u304c\u63d0\u4f9b\u3059\u308b\u300cVMware Avi Load Balancer\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u6df1\u523b\u306a\u5f71\u97ff\u3092\u4e0e\u3048\u308b\u304a\u305d\u308c\u304c\u3042\u308a\u3001\u6ce8\u610f\u304c\u547c\u3073\u304b\u3051\u3089\u308c\u3066\u3044\u308b\u3002\n\n...\n\n\u300cCVE-2026-47865\u300d\u306f\u3001\u8a8d\u8a3c\u306e\u30d0\u30a4\u30d1\u30b9\u304c\u53ef\u80fd\u3068\u306a\u308b\u8106\u5f31\u6027\u3002\u30b3\u30f3\u30c8\u30ed\u30fc\u30eb\u30d7\u30ec\u30fc\u30f3\u3078\u30a2\u30af\u30bb\u30b9\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002\u4eca\u56de\u5224\u660e\u3057\u305f\u8106\u5f31\u6027\u306b\u304a\u3044\u3066\u5171\u901a\u8106\u5f31\u6027\u8a55\u4fa1\u30b7\u30b9\u30c6\u30e0\u300cCVSSv3.1\u300d\u306e\u30d9\u30fc\u30b9\u30b9\u30b3\u30a2\u304c\u3082\u3063\u3068\u3082\u9ad8\u304f\u300c9.8\u300d\u3068\u8a55\u4fa1\u3055\u308c\u3066\u3044\u308b\u3002", "creation_timestamp": "2026-08-13T19:58:03.596242Z"}, {"uuid": "4ae492ea-de1a-471a-a2d1-c78209b7ad0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47291", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mqhjyp7ngd2u", "content": "CVE-2026-47291: Windows Critical Unauthenticated Remote Code Execution in HTTP.sys", "creation_timestamp": "2026-07-12T15:54:32.704056Z"}, {"uuid": "f1271a33-7c09-4773-a867-df7ca52c6d9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47285", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0285", "content": "", "creation_timestamp": "2026-08-11T20:47:47.558054Z"}, {"uuid": "d218c99a-eb16-45bc-a7c3-bedf8aa990cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47291", "type": "seen", "source": "https://bsky.app/profile/tamosan.bsky.social/post/3mqihugrmfz2h", "content": "TrendAI\u306b\u3088\u308b\u89e3\u6790\u3002\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u304b\u3089\u306eDoS\u3084RCE\u3078\uff1aZero Day Initiative \u2014 CVE-2026-47291: Remote Code Execution in the Windows HTTP.sys www.zerodayinitiative.com/blog/2026/7/...", "creation_timestamp": "2026-07-13T00:49:02.218891Z"}, {"uuid": "cd489a8e-b1bf-4f60-a441-fabd633c3214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4769", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116911458109125585", "content": "#OT #Advisory VDE-2026-031WAGO: Early-Boot Diagnostic Exposure in WAGO System I/O Field Devices\nCertain devices in the WAGO System I/O Field series enable an internal diagnostic capability during the initial stages of system startup. This behavior, which is not part of the publicly documented feature set, briefly allows access to system functions before the main operating environment becomes fully active. Under specific conditions, this could permit interactions with system components that are normally protected during regular operation.#CVE CVE-2026-4769\nhttps://certvde.com/en/advisories/vde-2026-031/\n#CSAF https://wago.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-031.json", "creation_timestamp": "2026-07-13T07:21:18.817698Z"}, {"uuid": "f6a30275-5834-4d54-8405-992d68353348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4769", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqj7nsuneh2l", "content": "CVE-2026-4769 exposes WAGO System I/O field devices. An early-boot flaw lets an unauthenticated attacker reach full system compromise.\n#WAGO #CVE20264769 #ICS #OTSecurity #Firmware", "creation_timestamp": "2026-07-13T07:54:49.692305Z"}, {"uuid": "7cc893dc-ad37-417c-9912-ea1cd40c5970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4769", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjbmvfwld2x", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-4769 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 WAGO System I/O Field: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/EE685329-225C-40E1-9380-2C16BAB2E3C8", "creation_timestamp": "2026-07-13T08:30:05.774274Z"}, {"uuid": "a8d40e93-45b7-4edb-a3d7-ef1bfecd730f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4769", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqjdqsvy422q", "content": "CVE-2026-4769\nWAGO System I/O Field devices have a hidden diagnostic mode that becomes accessible for a short time during startup. This allows an attacker to access the device's internal processes without a password,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-13T09:08:05.262963Z"}, {"uuid": "48553d6a-e8d7-4430-b006-3877481f16e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4769", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqjgvs2k2e2g", "content": "CVE-2026-4769 - Unauthenticated Access to Internal Diagnostic Interface\nCVE ID : CVE-2026-4769\n \n Published : July 13, 2026, 8:16 a.m. | 1\u00a0hour, 13\u00a0minutes ago\n \n Description : Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability durin...", "creation_timestamp": "2026-07-13T10:04:33.200420Z"}, {"uuid": "0dec0475-b46c-4878-8355-e5fc4e38e9fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47835", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqjkfnce7b2m", "content": "\ud83d\udccc CVE-2026-47835 - In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire Vec... https://www.cyberhub.blog/cves/CVE-2026-47835", "creation_timestamp": "2026-07-13T11:07:06.349069Z"}, {"uuid": "e86f9129-4b50-48c9-8a3b-3eb72d9bbc2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://t.me/true_secator/8339", "content": "\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0441 Claude Mythos Preview 29-\u043b\u0435\u0442\u043d\u044f\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0435 Squid, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a Squidbleed, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442\u044c \u043a \u0443\u0442\u0435\u0447\u043a\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435.\n\nSquid - \u044d\u0442\u043e \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0432\u0435\u0431-\u043f\u0440\u043e\u043a\u0441\u0438 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u043e\u0441\u044b \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430\u043d\u0438\u044f \u0438 \u0443\u043b\u0443\u0447\u0448\u0438\u0442\u044c \u0432\u0440\u0435\u043c\u044f \u043e\u0442\u043a\u043b\u0438\u043a\u0430 \u0437\u0430 \u0441\u0447\u0435\u0442 \u043a\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. Squid \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 HTTP, HTTPS, FTP \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Calif \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e Squid \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e\u0439 \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 OpenSSL, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043a\u0430\u043a Heartbleed, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043d\u0430\u0437\u0432\u0430\u043b\u0438 \u0435\u0451\u00a0Squidbleed.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-47729 \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e FTP-\u043f\u0430\u0440\u0441\u0435\u0440 Squid \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0430\u043c\u044f\u0442\u0438, \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u044c \u043d\u0435\u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c FTP-\u0441\u0435\u0440\u0432\u0435\u0440, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440.\n\nSquidbleed \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043d\u0430\u0438\u0431\u043e\u043b\u044c\u0448\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0432 \u0441\u0440\u0435\u0434\u0430\u0445 \u0441 \u043e\u0431\u0449\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0435\u0442\u0438, \u0448\u043a\u043e\u043b\u044b \u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0442\u043e\u0447\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Wi-Fi, \u0433\u0434\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043c\u043e\u0433\u0443\u0442 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u0447\u0435\u0440\u0435\u0437 \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 Squid.\u00a0\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0442\u0430\u043a\u043e\u0439 \u0441\u0435\u0442\u0438, \u043c\u043e\u0436\u0435\u0442 \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0430\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0442\u043e\u043a\u0435\u043d\u044b \u0441\u0435\u0441\u0441\u0438\u0439 \u0438 \u043a\u043b\u044e\u0447\u0438 API.\u00a0\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f HTTP-\u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u043c\u0438, \u0433\u0434\u0435 Squid \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442 TLS-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435. \u0421\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 HTTPS-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u043f\u0440\u043e\u0437\u0440\u0430\u0447\u043d\u044b\u0435 \u0442\u0443\u043d\u043d\u0435\u043b\u0438 Connect, \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442\u0441\u044f.\n\n\u0425\u043e\u0442\u044f \u044d\u0442\u043e \u0438 \u0443\u043c\u0435\u043d\u044c\u0448\u0430\u0435\u0442 \u043e\u0431\u0449\u0443\u044e \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432\u0441\u0435 \u0435\u0449\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435 \u043f\u043e HTTP-\u0442\u0440\u0430\u0444\u0438\u043a\u0443 \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0438 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0441\u0440\u0435\u0434\u0430\u0445.\n\n\u041f\u0430\u0442\u0447 \u0431\u044b\u043b \u0432\u043a\u043b\u044e\u0447\u0435\u043d \u0432 \u0432\u0435\u0440\u0441\u0438\u044e Squid 8 \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 7.6 \u0432 \u0438\u044e\u043d\u0435 2026 \u0433\u043e\u0434\u0430. \u0420\u0438\u0441\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u043e\u0436\u043d\u043e \u0441\u043d\u0438\u0437\u0438\u0442\u044c, \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0432 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 FTP, \u0435\u0441\u043b\u0438 \u043e\u043d\u0430 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f.", "creation_timestamp": "2026-07-13T13:00:07.718395Z"}, {"uuid": "d299c99a-9a54-40e9-b0d9-688535623d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4765", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjqucnozj2s", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-4765: Stored XSS \u0432 RD Station Conversas \u0438 \u0435\u0451 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\n\n\n\nhttps://kripta.biz/posts/51FE7FDF-5970-4B19-B8D2-7FBDCC7AF785", "creation_timestamp": "2026-07-13T13:02:41.720113Z"}, {"uuid": "6524026f-23d3-44b8-89c3-2845a3f819cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4765", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqjv2ju4vn2t", "content": "CVE-2026-4765 - Stored Cross-Site Scripting (XSS) in Tallos Chat by RD Station Conversas\nCVE ID : CVE-2026-4765\n \n Published : July 13, 2026, 11:16 a.m. | 2\u00a0hours, 13\u00a0minutes ago\n \n Description : Stored Cross-Site Scripting (XSS) vulnerability in the RD Station Conversas chat....", "creation_timestamp": "2026-07-13T14:17:44.875734Z"}, {"uuid": "207b623c-ac1e-4b40-a7f3-d54e39776062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47291", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3mql2rlgygs2n", "content": "CVE-2026-47291: Integer Overflow Remote Code Execution in Windows HTTP.sys. CVE-2026-47291 is a critical remote code execution vulnerability in HTTP.sys, the kernel-mode HTTP protocol driver that underpins Internet Information.\ncore-jmp.org/2026/07/cve-... #cve #critical #windows #cve-2026-47291", "creation_timestamp": "2026-07-13T15:33:05.140251Z"}, {"uuid": "b667f818-8d84-49c3-91a7-8488affc706a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47829", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqk5omsbqy22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-47829 \u0432 bosh-cli: \u0443\u0433\u0440\u043e\u0437\u0430 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043d\u043e\u0439 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0438 \u0435\u0451 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\n\n\n\nhttps://kripta.biz/posts/C65ACBA1-388C-439C-8418-696EFB5DE9A9", "creation_timestamp": "2026-07-13T16:52:09.493651Z"}, {"uuid": "4319c3b7-86d6-4ec1-9088-013544dd9be5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47828", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqk5tcprho2a", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-47828 \u0432 BOSH: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/4E702269-3AA4-47AF-8755-C335C91AB438", "creation_timestamp": "2026-07-13T16:54:46.103231Z"}, {"uuid": "787e3e61-bb0a-44fb-b906-a896a3ed0985", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4765", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkcbuhrxe2w", "content": "\u0423\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: CVE-2026-4765 \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c XSS \u0432 RD Station Conversas\n\n\n\nhttps://kripta.biz/posts/5915E1C1-68AE-409A-B967-84D5C09E6680", "creation_timestamp": "2026-07-13T18:14:29.130878Z"}, {"uuid": "30f09058-8f25-4063-801f-62183daab53e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4765", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mqkcbuknob2g", "content": "RD Station Conversas \u804a\u5929\u5de5\u5177\u5b58\u50a8\u578bXSS\u6f0f\u6d1e(CVE-2026-4765)\u6df1\u5ea6\u5206\u6790\u4e0e\u5b89\u5168\u9632\u62a4\u6307\u5357\n\n\n\nhttps://qian.cx/posts/DB932E72-C574-4CE1-A4D2-A3EA18B1669D", "creation_timestamp": "2026-07-13T18:14:29.916605Z"}, {"uuid": "2f2c6c38-2ffb-456b-8653-bcd3c33f3199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47858", "type": "published-proof-of-concept", "source": "Telegram/OaQKbbdvw00bB0UsV4uIS74p-Dstov7w7gsjctrALY9lZiQ", "content": "", "creation_timestamp": "2026-08-20T03:00:04.008824Z"}, {"uuid": "acc3a6a6-a976-4ddf-912c-9a2b866f1afa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47670", "type": "seen", "source": "https://t.me/GithubRedTeam/89566", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-47670\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a error-inside\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-18 22:16:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAuthenticated Remote Code Execution via loadReader functionName code injection in DbGate\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:23.197730Z"}, {"uuid": "cf7d2073-ec84-4c6d-8432-1fca784944a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47858", "type": "published-proof-of-concept", "source": "Telegram/70I5ZXCQ9tuhykRUfpeQOhK2E7uK_n9kN9IGVX__WKzWNyM", "content": "", "creation_timestamp": "2026-08-20T03:00:04.100464Z"}, {"uuid": "a17a2644-f0cd-4ba2-b5a6-e2aea376bb2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47677", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqkvb4cg3r2v", "content": "CVE-2026-47677 - facturascripts\nFacturaScripts, a web-based accounting software, has a security flaw that allows an attacker to bypass two-factor authentication (2FA) and take control of any user's\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#facturascripts #composer #CVE #infosec", "creation_timestamp": "2026-07-13T23:54:05.333299Z"}, {"uuid": "a6c4897d-61eb-40eb-9db7-ce361e0472da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47677", "type": "published-proof-of-concept", "source": "https://github.com/NeoRazorX/facturascripts/security/advisories/GHSA-c67f-gmxw-mj93", "content": "", "creation_timestamp": "2026-07-14T00:35:03.210094Z"}, {"uuid": "0addc682-d08f-4c0d-8abb-e0ae5470d7d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://t.me/bdufstecru/3263", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 strchr() \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Squid \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438\n\nBDU:2026-08611\nCVE-2026-47729\n\n\u0412 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c\u0441\u044f \"\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c LINUX\", \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u043c\u0435\u0442\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0435 \u0424\u0421\u0422\u042d\u041a \u0420\u043e\u0441\u0441\u0438\u0438, \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u043e\u043c 25 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Squid:\nhttps://github.com/squid-cache/squid/releases/tag/SQUID_7_6\n\n\u0414\u043b\u044f Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2026-47729\n\n\u0414\u043b\u044f Ubuntu:\nhttps://ubuntu.com/security/CVE-2026-47729", "creation_timestamp": "2026-07-14T01:00:05.495035Z"}, {"uuid": "ba30f51f-695f-476f-a5cf-f1a5e95e24e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4765", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlceprjyk2i", "content": "\u0423\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: CVE-2026-4765 \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c XSS \u0432 RD Station Conversas\n\n\n\nhttps://kripta.biz/posts/E51E3897-91C9-45ED-99CD-C40E23A5F1EA", "creation_timestamp": "2026-07-14T03:48:45.050598Z"}, {"uuid": "65abc85d-f5fe-46a5-a7de-68d3d0b74cd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47828", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqldfkrfn62f", "content": "\ud83d\udccc CVE-2026-47828 - During bosh create-env and bosh delete-env, the CLI uploads compiled CPI packages and rendered job templates to the new VM's DAV blobstore over HTTPS ... https://www.cyberhub.blog/cves/CVE-2026-47828", "creation_timestamp": "2026-07-14T04:07:07.206790Z"}, {"uuid": "c625b99f-4551-4233-8a81-f0ac88397a96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47826", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqlk457pjs2k", "content": "\ud83d\udccc CVE-2026-47826 - The blobs.yml path key traversal vulnerability in the BOSH CLI tool allows an attacker to write arbitrary files and exfiltrate sensitive information.\n... https://www.cyberhub.blog/cves/CVE-2026-47826", "creation_timestamp": "2026-07-14T06:07:07.362010Z"}, {"uuid": "a44f4b9e-3a73-4c1f-bdab-d92ba26a4811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47291", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mqlyypb6q62i", "content": "CVE-2026-47291: Remote Code Execution in the Windows HTTP.sys\n\n", "creation_timestamp": "2026-07-14T10:33:45.424818Z"}, {"uuid": "5676ccea-fe8d-4102-a9ae-903ae92de228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47865", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqmae3g5uh24", "content": "VMware Avi Load Balancer patches CVE-2026-47865 (CVSS 9.8), a critical authentication bypass, plus six more flaws. Upgrade the Avi Controller now.\n\n#VMware #AviLoadBalancer #CVE202647865 #AuthenticationBypass #CyberSecurity", "creation_timestamp": "2026-07-14T12:45:16.229003Z"}, {"uuid": "efacc3a9-fab2-40bc-a9b4-1449b8cab8eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47865", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqmifbztk62g", "content": "CVE-2026-47865: VMware Avi Load Balancer Vulnerabilities Demand Urgent Action #CyberSecurity #VMware #LoadBalancer", "creation_timestamp": "2026-07-14T15:09:06.607907Z"}, {"uuid": "237317d7-c371-4f94-9237-4d19f0c1f9d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47865", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqmifhw5al2k", "content": "VMware Avi Load Balancer's CVE-2026-47865 Through CVE-2026-47871 Are Blueprint for Future Attacks #VMware #CyberSecurity #Vulnerabilities", "creation_timestamp": "2026-07-14T15:09:12.655129Z"}, {"uuid": "2a1507f4-7602-4c0d-b646-e6dd3e21cff6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47871", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqmifhw5al2k", "content": "VMware Avi Load Balancer's CVE-2026-47865 Through CVE-2026-47871 Are Blueprint for Future Attacks #VMware #CyberSecurity #Vulnerabilities", "creation_timestamp": "2026-07-14T15:09:12.697638Z"}, {"uuid": "5e4566ca-0f18-4c76-b0eb-58a05d480d55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47865", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqmifmosyu2p", "content": "CVE-2026-47865: VMware's Patch Shouldn't Distract From Surveillance Risks #CVE202647865 #VMware #AviLoadBalancer", "creation_timestamp": "2026-07-14T15:09:17.769833Z"}, {"uuid": "b822f473-45ce-49f6-9a35-bb5d425ea77d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47865", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqmijywtc424", "content": "CVE-2026-47865: Is VMware's Quick Response to Load Balancer Flaws Enough? #CVE2026 #VMware #Cybersecurity", "creation_timestamp": "2026-07-14T15:11:45.030858Z"}, {"uuid": "4e2881b3-4ce5-47fd-8784-17a74a309f55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47290", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-14T19:00:54.949526Z"}, {"uuid": "52424ede-de24-4636-a5a7-0420a7ed498f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47642", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-14T19:00:57.454201Z"}, {"uuid": "5549c848-c4cd-4eda-8c93-7624e91c0882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47305", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0235", "content": "Microsoft heeft kwetsbaarheden verholpen in Developer Tools als .NET en Visual Studio. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot schade uit de categorie\u00ebn zoals genoemd in bijgevoegde tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bronbestand te openen en verwerken in de ontwikkelomgeving.\n\n```\nVisual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47305 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47282 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45496 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50520 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-57101 | 7.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-57102 | 8.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50524 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50527 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50646 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50648 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50650 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nASP.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47300 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-47303 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50506 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56170 | 7.50 | Denial-of-Service                   | \n| CVE-2026-45646 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47302 | 7.50 | Denial-of-Service                   | \n| CVE-2026-47304 | 8.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50525 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50526 | 7.00 | Manipulatie van gegevens            | \n| CVE-2026-50528 | 8.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50649 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50651 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50659 | 6.50 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57108 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41109 | 8.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:00:59.552766Z"}, {"uuid": "00bca247-d59d-4d4b-befa-888abb5f3c58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47282", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0235", "content": "Microsoft heeft kwetsbaarheden verholpen in Developer Tools als .NET en Visual Studio. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot schade uit de categorie\u00ebn zoals genoemd in bijgevoegde tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bronbestand te openen en verwerken in de ontwikkelomgeving.\n\n```\nVisual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47305 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47282 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45496 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50520 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-57101 | 7.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-57102 | 8.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50524 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50527 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50646 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50648 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50650 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nASP.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47300 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-47303 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50506 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56170 | 7.50 | Denial-of-Service                   | \n| CVE-2026-45646 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47302 | 7.50 | Denial-of-Service                   | \n| CVE-2026-47304 | 8.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50525 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50526 | 7.00 | Manipulatie van gegevens            | \n| CVE-2026-50528 | 8.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50649 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50651 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50659 | 6.50 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57108 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41109 | 8.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:00:59.600238Z"}, {"uuid": "064c718a-9ddd-4005-8dbf-f89d62af8216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47300", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0235", "content": "Microsoft heeft kwetsbaarheden verholpen in Developer Tools als .NET en Visual Studio. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot schade uit de categorie\u00ebn zoals genoemd in bijgevoegde tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bronbestand te openen en verwerken in de ontwikkelomgeving.\n\n```\nVisual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47305 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47282 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45496 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50520 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-57101 | 7.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-57102 | 8.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50524 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50527 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50646 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50648 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50650 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nASP.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47300 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-47303 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50506 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56170 | 7.50 | Denial-of-Service                   | \n| CVE-2026-45646 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47302 | 7.50 | Denial-of-Service                   | \n| CVE-2026-47304 | 8.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50525 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50526 | 7.00 | Manipulatie van gegevens            | \n| CVE-2026-50528 | 8.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50649 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50651 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50659 | 6.50 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57108 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41109 | 8.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:00.178075Z"}, {"uuid": "fa187e43-c67a-4d19-90f3-7ad93838f603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47303", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0235", "content": "Microsoft heeft kwetsbaarheden verholpen in Developer Tools als .NET en Visual Studio. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot schade uit de categorie\u00ebn zoals genoemd in bijgevoegde tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bronbestand te openen en verwerken in de ontwikkelomgeving.\n\n```\nVisual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47305 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47282 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45496 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50520 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-57101 | 7.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-57102 | 8.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50524 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50527 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50646 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50648 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50650 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nASP.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47300 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-47303 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50506 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56170 | 7.50 | Denial-of-Service                   | \n| CVE-2026-45646 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47302 | 7.50 | Denial-of-Service                   | \n| CVE-2026-47304 | 8.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50525 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50526 | 7.00 | Manipulatie van gegevens            | \n| CVE-2026-50528 | 8.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50649 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50651 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50659 | 6.50 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57108 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41109 | 8.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:00.241075Z"}, {"uuid": "aebf8259-2bc7-4fea-ac5b-41f13b30d04b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47632", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0233", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Azure componenten. Een kwaadwillende kan de kwetsbaarheden misbruiken om een Denial-of-Service te veroorzaken, beveiligingsmaatregelen te omzeilen of zich verhoogde rechten toe te kennen en zo mogelijk toegang te krijgen tot gegevens waartoe de kwaadwillende aanvankelijk niet is geautoriseerd.\n\nDe ernstigste kwetsbaarheden bevonden zich in de OpenAI agent en Entra provisioning. Deze kwetsbaarheden zijn echter door Microsoft centraal reeds verholpen en slechts opgenomen ter informatie. Er zijn voor deze kwetsbaarheden geen acties vereist.\n\n```\nAzure CycleCloud: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57969 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58279 | 6.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Entra Provisioning Service (SyncFabric): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57100 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Monitor Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47632 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Spring Apps: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50338 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50652 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50653 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nAzure OpenAI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45499 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Synapse: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-26145 | 4.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-14T19:01:02.541984Z"}, {"uuid": "a7552c12-0c3c-417f-b9da-c5b14862f029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47302", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0235", "content": "Microsoft heeft kwetsbaarheden verholpen in Developer Tools als .NET en Visual Studio. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot schade uit de categorie\u00ebn zoals genoemd in bijgevoegde tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bronbestand te openen en verwerken in de ontwikkelomgeving.\n\n```\nVisual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47305 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47282 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45496 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50520 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-57101 | 7.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-57102 | 8.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50524 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50527 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50646 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50648 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50650 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nASP.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47300 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-47303 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50506 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56170 | 7.50 | Denial-of-Service                   | \n| CVE-2026-45646 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47302 | 7.50 | Denial-of-Service                   | \n| CVE-2026-47304 | 8.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50525 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50526 | 7.00 | Manipulatie van gegevens            | \n| CVE-2026-50528 | 8.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50649 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50651 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50659 | 6.50 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57108 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41109 | 8.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:00.719076Z"}, {"uuid": "6ad905e1-7eb3-4eef-9122-5dd7c08c9f00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47304", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0235", "content": "Microsoft heeft kwetsbaarheden verholpen in Developer Tools als .NET en Visual Studio. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot schade uit de categorie\u00ebn zoals genoemd in bijgevoegde tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bronbestand te openen en verwerken in de ontwikkelomgeving.\n\n```\nVisual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47305 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47282 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45496 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50520 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-57101 | 7.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-57102 | 8.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50524 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50527 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50646 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50648 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50650 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nASP.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47300 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-47303 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50506 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56170 | 7.50 | Denial-of-Service                   | \n| CVE-2026-45646 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47302 | 7.50 | Denial-of-Service                   | \n| CVE-2026-47304 | 8.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50525 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50526 | 7.00 | Manipulatie van gegevens            | \n| CVE-2026-50528 | 8.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50649 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50651 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50659 | 6.50 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57108 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41109 | 8.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:00.779184Z"}, {"uuid": "8af638a8-729c-4a3c-8869-e3e6e7f2ab1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47296", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0232", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse componenten van SQL Server. Een kwaadwillende kan de kwetsbaarheden misbruiken om zich verhoogde rechten toe te kennen, willekeurige code uit te voeren en/of toegang te krijgen tot gevoelige gegevens.\n\n```\nSQL Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47296 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54117 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54118 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55002 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-47295 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50468 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54116 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Fabric Data Warehouse: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56642 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nPower BI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58647 | 8.00 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-14T19:01:03.022689Z"}, {"uuid": "49715b86-8757-4a84-8b30-42a3ee98a0ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47295", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0232", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse componenten van SQL Server. Een kwaadwillende kan de kwetsbaarheden misbruiken om zich verhoogde rechten toe te kennen, willekeurige code uit te voeren en/of toegang te krijgen tot gevoelige gegevens.\n\n```\nSQL Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47296 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54117 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54118 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55002 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-47295 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50468 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54116 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Fabric Data Warehouse: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56642 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nPower BI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58647 | 8.00 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-14T19:01:03.263847Z"}, {"uuid": "a1c0e2db-468c-4fbf-b534-e143a8b09f4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97908", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a OmriBaso\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C#\n\u2b50 Star\u6570\u91cf\uff1a 4  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-13 14:50:06\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path traversal, certificate verification bypass, and DLL hijacking to achieve SYSTEM-level code execution.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-14T00:00:08.150333Z"}, {"uuid": "eed4b779-818d-4969-8d95-547f08cfa3e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47300", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqmxflgkv42e", "content": "CVE-2026-47300 - ASP.NET Core Elevation of Privilege Vulnerability\nCVE ID : CVE-2026-47300\n \n Published : July 14, 2026, 7:17 p.m. | 13\u00a0minutes ago\n \n Description : Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate pr...", "creation_timestamp": "2026-07-14T19:37:42.131143Z"}, {"uuid": "641e59ae-0df8-4a68-a91f-59396d419780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47429", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqmxjui5ty2t", "content": "CVE-2026-47429 - vitest\nIf you're using Vitest UI on Windows and exposing it to the network, or running it on Windows without proper security, an attacker could access and execute arbitrary files.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vitest #GitHubActions #npm #CVE #infosec", "creation_timestamp": "2026-07-14T19:40:05.831331Z"}, {"uuid": "a1c20d35-cd2e-40b4-ac4f-b4e16350a597", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47303", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqmz3qxqiu2e", "content": "CVE-2026-47303 - ASP.NET Core Elevation of Privilege Vulnerability\nCVE ID : CVE-2026-47303\n \n Published : July 14, 2026, 7:17 p.m. | 13\u00a0minutes ago\n \n Description : Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privile...", "creation_timestamp": "2026-07-14T20:08:00.247941Z"}, {"uuid": "fe7c7fdb-14a7-47d3-92aa-f70a277f6112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47302", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqmyagoxot25", "content": "CVE-2026-47302 - .NET Denial of Service Vulnerability\nCVE ID : CVE-2026-47302\n \n Published : July 14, 2026, 7:17 p.m. | 13\u00a0minutes ago\n \n Description : Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.\n...", "creation_timestamp": "2026-07-14T19:52:43.159858Z"}, {"uuid": "af9b1376-9914-4c43-a7be-5857fd4e125d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47767", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqmyorqyxp2q", "content": "CVE-2026-47767 - Symfony: SymfonyRuntime CVE-2024-50340 Patch Bypass: Web Requests Can Still Set APP_ENV/APP_DEBUG via parse_str/SAPI Argv Mismatch\nCVE ID : CVE-2026-47767\n \n Published : July 14, 2026, 7:17 p.m. | 13\u00a0minutes ago\n \n Description : Symfony is a PHP framework for ...", "creation_timestamp": "2026-07-14T20:00:44.368249Z"}, {"uuid": "34858521-b285-4636-87e9-2b50bd91eba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqmyqlcmbo2l", "content": "CVE-2026-47301 - Configuration Manager Elevation of Privilege Vulnerability\nCVE ID : CVE-2026-47301\n \n Published : July 14, 2026, 7:17 p.m. | 13\u00a0minutes ago\n \n Description : Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate pri...", "creation_timestamp": "2026-07-14T20:01:44.684179Z"}, {"uuid": "e2f6d7a4-b544-4d3d-a35d-2783f0b01551", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47304", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqmyu6fpmf2i", "content": "CVE-2026-47304 - .NET Security Feature Bypass Vulnerability\nCVE ID : CVE-2026-47304\n \n Published : July 14, 2026, 7:17 p.m. | 13\u00a0minutes ago\n \n Description : Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature o...", "creation_timestamp": "2026-07-14T20:03:45.443341Z"}, {"uuid": "c584ce41-ff5d-4047-b669-8fddf3e31d42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47295", "type": "seen", "source": "https://bsky.app/profile/dustin.nz/post/3mqmz7fqx4c2s", "content": "Oh this is a good one.\n\nCVE-2026-47295\n> An attacker could inject arbitrary T-SQL commands by crafting a malicious database name.", "creation_timestamp": "2026-07-14T20:10:06.211052Z"}, {"uuid": "30160dba-0a50-4a31-a338-e1b9c0026875", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47305", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqmz5tcsbl24", "content": "CVE-2026-47305 - Visual Studio Remote Code Execution Vulnerability\nCVE ID : CVE-2026-47305\n \n Published : July 14, 2026, 7:17 p.m. | 13\u00a0minutes ago\n \n Description : Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally.\n \n Severi...", "creation_timestamp": "2026-07-14T20:09:09.563557Z"}, {"uuid": "18e80bfc-eca6-4687-be20-11f2db5aac5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47300", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jvvr2k2u", "content": "CVE-2026-47300 | .NET Elevation of Privilege Vulnerability - If you're using Negotiate auth on linux using LDAP as a role store, you are affected.\n\nStop trying to emulate Windows Integrated auth on linux based web apps. Use OAuth already.", "creation_timestamp": "2026-07-14T20:34:06.909077Z"}, {"uuid": "6b1ea7a2-b339-4b15-a997-2490e79e7da8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47303", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jvvr2k2u", "content": "CVE-2026-47303 \u2013 .NET Elevation of Privilege Vulnerability - more negotiate auth problems. If you're using Microsoft.AspNetCore.Authentication.Negotiate update. And please move to OAuth as an authentication mechanism", "creation_timestamp": "2026-07-14T20:34:07.915912Z"}, {"uuid": "68788c66-2283-413e-8ff8-7ac422866c99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47302", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jvvr2k2u", "content": "EncryptedXml again. You're already updating for CVE-2026-47302, but this one is not a DoS, it's a security feature bypass where an attacker could get access to encrypted data.", "creation_timestamp": "2026-07-14T20:34:08.354114Z"}, {"uuid": "53b121cb-07b3-43ef-bb56-c96a26e783bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47303", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jyrz7d2u", "content": "CVE-2026-47303 \u2013 .NET Elevation of Privilege Vulnerability - more negotiate auth problems. If you're using Microsoft.AspNetCore.Authentication.Negotiate update. And please move to OAuth as an authentication mechanism", "creation_timestamp": "2026-07-14T20:35:32.877136Z"}, {"uuid": "863850de-1b02-4e2a-8908-fc4c734bd34a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47300", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jvvww22u", "content": "CVE-2026-47300 | .NET Elevation of Privilege Vulnerability - If you're using Negotiate auth on linux using LDAP as a role store, you are affected.\n\nStop trying to emulate Windows Integrated auth on linux based web apps. Use OAuth already.", "creation_timestamp": "2026-07-14T20:34:14.192243Z"}, {"uuid": "b65f75a4-5d33-4b65-8ff8-651d8f8b9bde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47303", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jws2dc2u", "content": "CVE-2026-47303 \u2013 .NET Elevation of Privilege Vulnerability - more negotiate auth problems. If you're using Microsoft.AspNetCore.Authentication.Negotiate update. And please move to OAuth as an authentication mechanism", "creation_timestamp": "2026-07-14T20:34:42.049852Z"}, {"uuid": "c86eb5ec-f09d-4373-a73c-82f73a6a9398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47303", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jvvww22u", "content": "CVE-2026-47303 \u2013 .NET Elevation of Privilege Vulnerability - more negotiate auth problems. If you're using Microsoft.AspNetCore.Authentication.Negotiate update. And please move to OAuth as an authentication mechanism", "creation_timestamp": "2026-07-14T20:34:16.203196Z"}, {"uuid": "32f52375-b3b1-4c20-b58b-63581650d72e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47302", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jvvww22u", "content": "EncryptedXml again. You're already updating for CVE-2026-47302, but this one is not a DoS, it's a security feature bypass where an attacker could get access to encrypted data.", "creation_timestamp": "2026-07-14T20:34:16.593633Z"}, {"uuid": "4904b0a7-8310-450b-ae44-fb906ce739ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47303", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jwrze22u", "content": "CVE-2026-47303 \u2013 .NET Elevation of Privilege Vulnerability - more negotiate auth problems. If you're using Microsoft.AspNetCore.Authentication.Negotiate update. And please move to OAuth as an authentication mechanism", "creation_timestamp": "2026-07-14T20:34:29.442998Z"}, {"uuid": "e4bfc297-09f6-4475-a7b0-36d016da081a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47302", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jy2ahl2u", "content": "EncryptedXml again. You're already updating for CVE-2026-47302, but this one is not a DoS, it's a security feature bypass where an attacker could get access to encrypted data.", "creation_timestamp": "2026-07-14T20:34:59.455027Z"}, {"uuid": "228c605e-65d6-44cb-9018-b1dd552c9027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47300", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jwrze22u", "content": "CVE-2026-47300 | .NET Elevation of Privilege Vulnerability - If you're using Negotiate auth on linux using LDAP as a role store, you are affected.\n\nStop trying to emulate Windows Integrated auth on linux based web apps. Use OAuth already.", "creation_timestamp": "2026-07-14T20:34:28.603296Z"}, {"uuid": "33b1fad7-4e34-4496-8279-87d42937a888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47302", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jwrze22u", "content": "EncryptedXml again. You're already updating for CVE-2026-47302, but this one is not a DoS, it's a security feature bypass where an attacker could get access to encrypted data.", "creation_timestamp": "2026-07-14T20:34:29.863881Z"}, {"uuid": "fa7ac307-a259-4727-a428-d2e19ccffd14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47300", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jws2dc2u", "content": "CVE-2026-47300 | .NET Elevation of Privilege Vulnerability - If you're using Negotiate auth on linux using LDAP as a role store, you are affected.\n\nStop trying to emulate Windows Integrated auth on linux based web apps. Use OAuth already.", "creation_timestamp": "2026-07-14T20:34:41.160724Z"}, {"uuid": "24c59d10-bfa7-4170-b110-c75ea47edf78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47302", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jws2dc2u", "content": "EncryptedXml again. You're already updating for CVE-2026-47302, but this one is not a DoS, it's a security feature bypass where an attacker could get access to encrypted data.", "creation_timestamp": "2026-07-14T20:34:42.484069Z"}, {"uuid": "511f00f5-206b-4456-b3ac-5dcab2e5b5df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47303", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jy2ahk2u", "content": "CVE-2026-47303 \u2013 .NET Elevation of Privilege Vulnerability - more negotiate auth problems. If you're using Microsoft.AspNetCore.Authentication.Negotiate update. And please move to OAuth as an authentication mechanism", "creation_timestamp": "2026-07-14T20:34:49.534563Z"}, {"uuid": "8e25d0ee-f825-4923-a88f-017c87425e12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47303", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jza6dd2u", "content": "CVE-2026-47303 \u2013 .NET Elevation of Privilege Vulnerability - more negotiate auth problems. If you're using Microsoft.AspNetCore.Authentication.Negotiate update. And please move to OAuth as an authentication mechanism", "creation_timestamp": "2026-07-14T20:36:15.508280Z"}, {"uuid": "8a75c392-1ec9-46b5-8a3f-89f648af3960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47303", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k7rfnd2u", "content": "CVE-2026-47303 \u2013 .NET Elevation of Privilege Vulnerability - more negotiate auth problems. If you're using Microsoft.AspNetCore.Authentication.Negotiate update. And please move to OAuth as an authentication mechanism", "creation_timestamp": "2026-07-14T20:36:56.582178Z"}, {"uuid": "ff861bd1-97b2-4523-b271-153f1a642e5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47300", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jy2ahk2u", "content": "CVE-2026-47300 | .NET Elevation of Privilege Vulnerability - If you're using Negotiate auth on linux using LDAP as a role store, you are affected.\n\nStop trying to emulate Windows Integrated auth on linux based web apps. Use OAuth already.", "creation_timestamp": "2026-07-14T20:34:48.750199Z"}, {"uuid": "7a6bcca3-b143-4cfc-8c4f-3d4af40c70c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47302", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jy2ahk2u", "content": "EncryptedXml again. You're already updating for CVE-2026-47302, but this one is not a DoS, it's a security feature bypass where an attacker could get access to encrypted data.", "creation_timestamp": "2026-07-14T20:34:50.021065Z"}, {"uuid": "5c5f34f1-533e-477d-9b41-f0b3e3a438c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47300", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jy2ahl2u", "content": "CVE-2026-47300 | .NET Elevation of Privilege Vulnerability - If you're using Negotiate auth on linux using LDAP as a role store, you are affected.\n\nStop trying to emulate Windows Integrated auth on linux based web apps. Use OAuth already.", "creation_timestamp": "2026-07-14T20:34:55.885765Z"}, {"uuid": "43572ad7-7962-40ff-bd84-1669bcad0fc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47303", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jy2ahl2u", "content": "CVE-2026-47303 \u2013 .NET Elevation of Privilege Vulnerability - more negotiate auth problems. If you're using Microsoft.AspNetCore.Authentication.Negotiate update. And please move to OAuth as an authentication mechanism", "creation_timestamp": "2026-07-14T20:34:59.031232Z"}, {"uuid": "9614b773-ac52-493e-b8e5-f9d8b2a367ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47300", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jy2bgt2u", "content": "CVE-2026-47300 | .NET Elevation of Privilege Vulnerability - If you're using Negotiate auth on linux using LDAP as a role store, you are affected.\n\nStop trying to emulate Windows Integrated auth on linux based web apps. Use OAuth already.", "creation_timestamp": "2026-07-14T20:35:07.067377Z"}, {"uuid": "9083a8bc-7072-48ac-a0f5-39ea010dbc28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47303", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jy2bgt2u", "content": "CVE-2026-47303 \u2013 .NET Elevation of Privilege Vulnerability - more negotiate auth problems. If you're using Microsoft.AspNetCore.Authentication.Negotiate update. And please move to OAuth as an authentication mechanism", "creation_timestamp": "2026-07-14T20:35:07.880456Z"}, {"uuid": "cbc24753-1c89-4b0f-89ad-a05d0dc8f604", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47302", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jy2bgt2u", "content": "EncryptedXml again. You're already updating for CVE-2026-47302, but this one is not a DoS, it's a security feature bypass where an attacker could get access to encrypted data.", "creation_timestamp": "2026-07-14T20:35:08.280034Z"}, {"uuid": "8b21e903-0837-41b2-96aa-14847c3194af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47300", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jyrz7d2u", "content": "CVE-2026-47300 | .NET Elevation of Privilege Vulnerability - If you're using Negotiate auth on linux using LDAP as a role store, you are affected.\n\nStop trying to emulate Windows Integrated auth on linux based web apps. Use OAuth already.", "creation_timestamp": "2026-07-14T20:35:32.012681Z"}, {"uuid": "98269a12-3c7a-4507-8e7b-3d2d15c9efcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47302", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2keqrat2u", "content": "EncryptedXml again. You're already updating for CVE-2026-47302, but this one is not a DoS, it's a security feature bypass where an attacker could get access to encrypted data.", "creation_timestamp": "2026-07-14T20:37:27.719783Z"}, {"uuid": "7411f18c-5909-4e67-a21f-223e721e850e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47302", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jyrz7d2u", "content": "EncryptedXml again. You're already updating for CVE-2026-47302, but this one is not a DoS, it's a security feature bypass where an attacker could get access to encrypted data.", "creation_timestamp": "2026-07-14T20:35:33.317851Z"}, {"uuid": "34d8bba7-cd9d-41d6-9136-60e134a317f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47300", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jza6dd2u", "content": "CVE-2026-47300 | .NET Elevation of Privilege Vulnerability - If you're using Negotiate auth on linux using LDAP as a role store, you are affected.\n\nStop trying to emulate Windows Integrated auth on linux based web apps. Use OAuth already.", "creation_timestamp": "2026-07-14T20:35:39.389004Z"}, {"uuid": "65814135-110d-4d98-8db1-8efabfc2f8d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47302", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jza6dd2u", "content": "EncryptedXml again. You're already updating for CVE-2026-47302, but this one is not a DoS, it's a security feature bypass where an attacker could get access to encrypted data.", "creation_timestamp": "2026-07-14T20:36:16.113359Z"}, {"uuid": "936d9ebc-c1e8-4d45-a6df-76791ecd2ef4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47300", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jzn7d32u", "content": "CVE-2026-47300 | .NET Elevation of Privilege Vulnerability - If you're using Negotiate auth on linux using LDAP as a role store, you are affected.\n\nStop trying to emulate Windows Integrated auth on linux based web apps. Use OAuth already.", "creation_timestamp": "2026-07-14T20:36:22.496489Z"}, {"uuid": "1b3286d7-5ec3-479c-ab33-49d5c3936d05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47303", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jzn7d32u", "content": "CVE-2026-47303 \u2013 .NET Elevation of Privilege Vulnerability - more negotiate auth problems. If you're using Microsoft.AspNetCore.Authentication.Negotiate update. And please move to OAuth as an authentication mechanism", "creation_timestamp": "2026-07-14T20:36:23.347724Z"}, {"uuid": "d153cef0-2f52-4608-9236-1296b3f966a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47302", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jzn7d32u", "content": "EncryptedXml again. You're already updating for CVE-2026-47302, but this one is not a DoS, it's a security feature bypass where an attacker could get access to encrypted data.", "creation_timestamp": "2026-07-14T20:36:23.778359Z"}, {"uuid": "ef755fd0-506f-4732-aed2-bdd46faefa6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47300", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k3xahl2u", "content": "CVE-2026-47300 | .NET Elevation of Privilege Vulnerability - If you're using Negotiate auth on linux using LDAP as a role store, you are affected.\n\nStop trying to emulate Windows Integrated auth on linux based web apps. Use OAuth already.", "creation_timestamp": "2026-07-14T20:36:32.091004Z"}, {"uuid": "5971e332-6aac-4dd0-8cc6-0b5cfd48560c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47303", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k3xahl2u", "content": "CVE-2026-47303 \u2013 .NET Elevation of Privilege Vulnerability - more negotiate auth problems. If you're using Microsoft.AspNetCore.Authentication.Negotiate update. And please move to OAuth as an authentication mechanism", "creation_timestamp": "2026-07-14T20:36:33.179584Z"}, {"uuid": "b397031c-f461-44a2-a1ed-71149dd7d80a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47302", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k3xahl2u", "content": "EncryptedXml again. You're already updating for CVE-2026-47302, but this one is not a DoS, it's a security feature bypass where an attacker could get access to encrypted data.", "creation_timestamp": "2026-07-14T20:36:33.601908Z"}, {"uuid": "6e98ac49-92c8-4a07-9569-b4281cd9be8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47300", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k4fpe32u", "content": "CVE-2026-47300 | .NET Elevation of Privilege Vulnerability - If you're using Negotiate auth on linux using LDAP as a role store, you are affected.\n\nStop trying to emulate Windows Integrated auth on linux based web apps. Use OAuth already.", "creation_timestamp": "2026-07-14T20:36:40.073032Z"}, {"uuid": "2d63034e-511e-41bb-a8be-047362a4d03d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47303", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k4fpe32u", "content": "CVE-2026-47303 \u2013 .NET Elevation of Privilege Vulnerability - more negotiate auth problems. If you're using Microsoft.AspNetCore.Authentication.Negotiate update. And please move to OAuth as an authentication mechanism", "creation_timestamp": "2026-07-14T20:36:40.893672Z"}, {"uuid": "f78d9833-0d49-465a-aaa2-bde4f653bcdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47302", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k4fpe32u", "content": "EncryptedXml again. You're already updating for CVE-2026-47302, but this one is not a DoS, it's a security feature bypass where an attacker could get access to encrypted data.", "creation_timestamp": "2026-07-14T20:36:41.317349Z"}, {"uuid": "e9260af8-efe2-4580-89cc-7fa72699b37b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47303", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2kbkcwl2u", "content": "CVE-2026-47303 \u2013 .NET Elevation of Privilege Vulnerability - more negotiate auth problems. If you're using Microsoft.AspNetCore.Authentication.Negotiate update. And please move to OAuth as an authentication mechanism", "creation_timestamp": "2026-07-14T20:37:11.165667Z"}, {"uuid": "4d792e29-103e-4248-a536-66dcdbc6151e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47302", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k6ve6l2u", "content": "EncryptedXml again. You're already updating for CVE-2026-47302, but this one is not a DoS, it's a security feature bypass where an attacker could get access to encrypted data.", "creation_timestamp": "2026-07-14T20:36:49.909451Z"}, {"uuid": "22479026-5ef0-4f32-81ce-f437d8508030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47300", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2ka72632u", "content": "CVE-2026-47300 | .NET Elevation of Privilege Vulnerability - If you're using Negotiate auth on linux using LDAP as a role store, you are affected.\n\nStop trying to emulate Windows Integrated auth on linux based web apps. Use OAuth already.", "creation_timestamp": "2026-07-14T20:37:02.897054Z"}, {"uuid": "3a12e8a0-a8b7-4c18-a0a2-ffc90f84c104", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47302", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2ka72632u", "content": "EncryptedXml again. You're already updating for CVE-2026-47302, but this one is not a DoS, it's a security feature bypass where an attacker could get access to encrypted data.", "creation_timestamp": "2026-07-14T20:37:04.146759Z"}, {"uuid": "53ba2a14-d408-4ca2-b97f-d2b0b920fa24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47300", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k6ve6l2u", "content": "CVE-2026-47300 | .NET Elevation of Privilege Vulnerability - If you're using Negotiate auth on linux using LDAP as a role store, you are affected.\n\nStop trying to emulate Windows Integrated auth on linux based web apps. Use OAuth already.", "creation_timestamp": "2026-07-14T20:36:48.676712Z"}, {"uuid": "74d1e44a-c4bd-4953-a73b-95a485534517", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47303", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k6ve6l2u", "content": "CVE-2026-47303 \u2013 .NET Elevation of Privilege Vulnerability - more negotiate auth problems. If you're using Microsoft.AspNetCore.Authentication.Negotiate update. And please move to OAuth as an authentication mechanism", "creation_timestamp": "2026-07-14T20:36:49.511625Z"}, {"uuid": "1541133f-fd84-4891-aa5f-c0809ada3c3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47300", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k7rfnd2u", "content": "CVE-2026-47300 | .NET Elevation of Privilege Vulnerability - If you're using Negotiate auth on linux using LDAP as a role store, you are affected.\n\nStop trying to emulate Windows Integrated auth on linux based web apps. Use OAuth already.", "creation_timestamp": "2026-07-14T20:36:55.731371Z"}, {"uuid": "521b6c83-44a9-49b5-a0dd-89cf27783563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47302", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k7rfnd2u", "content": "EncryptedXml again. You're already updating for CVE-2026-47302, but this one is not a DoS, it's a security feature bypass where an attacker could get access to encrypted data.", "creation_timestamp": "2026-07-14T20:36:57.026694Z"}, {"uuid": "ca22cd36-b7c1-4e15-abb9-460da05cd90d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47303", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2ka72632u", "content": "CVE-2026-47303 \u2013 .NET Elevation of Privilege Vulnerability - more negotiate auth problems. If you're using Microsoft.AspNetCore.Authentication.Negotiate update. And please move to OAuth as an authentication mechanism", "creation_timestamp": "2026-07-14T20:37:03.716680Z"}, {"uuid": "87499545-ad87-4651-8751-c9c4f8018159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47300", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2kbkcwl2u", "content": "CVE-2026-47300 | .NET Elevation of Privilege Vulnerability - If you're using Negotiate auth on linux using LDAP as a role store, you are affected.\n\nStop trying to emulate Windows Integrated auth on linux based web apps. Use OAuth already.", "creation_timestamp": "2026-07-14T20:37:10.317576Z"}, {"uuid": "1338db13-b5fd-4efa-b19a-3c562393c1e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47302", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2kbkcwl2u", "content": "EncryptedXml again. You're already updating for CVE-2026-47302, but this one is not a DoS, it's a security feature bypass where an attacker could get access to encrypted data.", "creation_timestamp": "2026-07-14T20:37:11.570797Z"}, {"uuid": "78fa6f57-cf6c-4592-bc85-efb457ffc6aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://t.me/CyberDispatch/2093", "content": "A 1997 parser bug is still haunting Squid.\n\nSquidbleed (CVE-2026-47729) can leak another user\u2019s cleartext HTTP request through a shared Squid proxy, including credentials or session tokens.", "creation_timestamp": "2026-08-29T20:00:08.992220Z"}, {"uuid": "5cef5b5a-5b6a-4570-a304-27b44fa3c715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47303", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2kcamsd2u", "content": "CVE-2026-47303 \u2013 .NET Elevation of Privilege Vulnerability - more negotiate auth problems. If you're using Microsoft.AspNetCore.Authentication.Negotiate update. And please move to OAuth as an authentication mechanism", "creation_timestamp": "2026-07-14T20:37:19.667496Z"}, {"uuid": "2e350e4e-eb88-4ee5-a1c3-c4a3c45a6d9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47300", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2kfaael2u", "content": "CVE-2026-47300 | .NET Elevation of Privilege Vulnerability - If you're using Negotiate auth on linux using LDAP as a role store, you are affected.\n\nStop trying to emulate Windows Integrated auth on linux based web apps. Use OAuth already.", "creation_timestamp": "2026-07-14T20:37:35.017944Z"}, {"uuid": "d23ebc48-11f2-4b2a-90ff-d77745a42708", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47300", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2kcamsd2u", "content": "CVE-2026-47300 | .NET Elevation of Privilege Vulnerability - If you're using Negotiate auth on linux using LDAP as a role store, you are affected.\n\nStop trying to emulate Windows Integrated auth on linux based web apps. Use OAuth already.", "creation_timestamp": "2026-07-14T20:37:18.795802Z"}, {"uuid": "a9a2cdf9-366c-4185-8dc1-b153c9d0af0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47302", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2kcamsd2u", "content": "EncryptedXml again. You're already updating for CVE-2026-47302, but this one is not a DoS, it's a security feature bypass where an attacker could get access to encrypted data.", "creation_timestamp": "2026-07-14T20:37:20.090834Z"}, {"uuid": "178a9f3c-b748-4afa-b071-c67dbe977321", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47300", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2keqrat2u", "content": "CVE-2026-47300 | .NET Elevation of Privilege Vulnerability - If you're using Negotiate auth on linux using LDAP as a role store, you are affected.\n\nStop trying to emulate Windows Integrated auth on linux based web apps. Use OAuth already.", "creation_timestamp": "2026-07-14T20:37:26.399460Z"}, {"uuid": "a18b21e1-33f8-4575-8bbf-c0708d956c50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47303", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2kfaael2u", "content": "CVE-2026-47303 \u2013 .NET Elevation of Privilege Vulnerability - more negotiate auth problems. If you're using Microsoft.AspNetCore.Authentication.Negotiate update. And please move to OAuth as an authentication mechanism", "creation_timestamp": "2026-07-14T20:37:35.992707Z"}, {"uuid": "aaad9e3f-c72b-4337-98d4-06e2c24471ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47303", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2keqrat2u", "content": "CVE-2026-47303 \u2013 .NET Elevation of Privilege Vulnerability - more negotiate auth problems. If you're using Microsoft.AspNetCore.Authentication.Negotiate update. And please move to OAuth as an authentication mechanism", "creation_timestamp": "2026-07-14T20:37:27.262950Z"}, {"uuid": "07232562-d933-43e6-8c04-d54dfe8cbbf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47302", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2kfaael2u", "content": "EncryptedXml again. You're already updating for CVE-2026-47302, but this one is not a DoS, it's a security feature bypass where an attacker could get access to encrypted data.", "creation_timestamp": "2026-07-14T20:37:36.419704Z"}, {"uuid": "1416c868-e587-41db-8ede-d4d9565b83fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47304", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:02:27.678188Z"}, {"uuid": "008fab79-db15-45e6-8a90-c74ec14486ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47300", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:02:30.498783Z"}, {"uuid": "c1eb49ea-b7ad-4638-8870-d7f77802f930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47302", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:02:24.716768Z"}, {"uuid": "eb811d73-3de9-44b8-ae47-490e8f0fcd73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47632", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:02:32.111687Z"}, {"uuid": "02b431c7-f544-4caa-ac52-6bacecedb030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47282", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:02:38.365660Z"}, {"uuid": "1a389503-cf43-4882-a48d-585071031b3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47303", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:02:30.777953Z"}, {"uuid": "01bb903f-0c13-4315-9b6a-c48e2a8aa809", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47642", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:02:59.757780Z"}, {"uuid": "07493225-6e7d-4843-a201-b503ab31988d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47296", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:03:17.654971Z"}, {"uuid": "624e626e-c53a-4359-ad80-3cbcef6e7e56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47305", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:03:29.376153Z"}, {"uuid": "93366b73-ebd1-41b4-886d-a37eabf27bd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47295", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:03:18.156069Z"}, {"uuid": "014c5eb6-a750-4e19-adbb-1edfcb107235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47290", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:03:11.582825Z"}, {"uuid": "4961ff39-f38e-4dab-9fb3-ad58e1ddc606", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47670", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/89566", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-47670\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a error-inside\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-18 22:16:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAuthenticated Remote Code Execution via loadReader functionName code injection in DbGate\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:09.288787Z"}, {"uuid": "0e9de5e0-c59d-48df-9241-922e055f885c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47302", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mte67spmi32f", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-47302 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/631 #AWS #Lambda #Security #CVE #DevOps #SecOps", "creation_timestamp": "2026-08-18T12:01:21.898691Z"}, {"uuid": "07ba5eb0-8ff3-45ae-975d-d2eb12bee79e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3263", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 strchr() \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Squid \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438\n\nBDU:2026-08611\nCVE-2026-47729\n\n\u0412 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c\u0441\u044f \"\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c LINUX\", \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u043c\u0435\u0442\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0435 \u0424\u0421\u0422\u042d\u041a \u0420\u043e\u0441\u0441\u0438\u0438, \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u043e\u043c 25 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Squid:\nhttps://github.com/squid-cache/squid/releases/tag/SQUID_7_6\n\n\u0414\u043b\u044f Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2026-47729\n\n\u0414\u043b\u044f Ubuntu:\nhttps://ubuntu.com/security/CVE-2026-47729", "creation_timestamp": "2026-07-15T00:00:34.723600Z"}, {"uuid": "70a9523d-bb9c-4055-beea-2897a2cc0087", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47998", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mqnswby5gi2t", "content": "CVE-2026-47998 (MEDIUM) CVSS 5.9: https://experiencedigest.org/2026/07/14/cve-medium-cvss.html", "creation_timestamp": "2026-07-15T03:50:13.763563Z"}, {"uuid": "97b8217c-cd85-4ea6-b719-18069f8c0e69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47295", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mqnvcdm2qd2u", "content": "Top 3 CVE for last 7 days:\nCVE-2026-43499: 26 interactions\nCVE-2026-20262: 14 interactions\nCVE-2026-44747: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-44747: 14 interactions\nCVE-2026-47295: 6 interactions\nCVE-2026-54527: 6 interactions\n", "creation_timestamp": "2026-07-15T04:32:45.609836Z"}, {"uuid": "2def039e-6455-4d6c-a03f-fdfbf7fc049e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47992", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mqoimquynu2z", "content": "CVE-2026-47992 (HIGH) CVSS 7.2: https://experiencedigest.org/2026/07/15/cve-high-cvss.html", "creation_timestamp": "2026-07-15T10:18:35.918788Z"}, {"uuid": "70c37a2b-c62c-4c23-9862-40775ef95465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://t.me/thehackernews/9301", "content": "\ud83e\udd2f A 1997 parser bug is still haunting Squid.\n\nSquidbleed (CVE-2026-47729) can leak another user\u2019s cleartext HTTP request through a shared Squid proxy, including credentials or session tokens.\n\nRead \ud83e\udc16 https://thehackernews.com/2026/06/29-year-old-squid-proxy-bug-squidbleed.html", "creation_timestamp": "2026-07-15T12:00:04.342798Z"}, {"uuid": "d36e2be9-5539-421e-9b15-a779cd2bb4b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47428", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqotrh5lhp2u", "content": "CVE-2026-47428 - browser\nVitest's browser mode can execute malicious JavaScript if you visit a specially crafted URL. This could allow an attacker to steal your Vitest API token and use it to access your\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#browser #vitest #npm #CVE #infosec", "creation_timestamp": "2026-07-15T13:38:04.946277Z"}, {"uuid": "b3857793-21b4-496d-932d-cf0ae4599658", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47988", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqp2p6ln5c25", "content": "CVE-2026-47988 - commerce\nAdobe Commerce's security features can be bypassed, allowing unauthorized access to sensitive data and functions. This can be exploited without user interaction, making it a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#commerce #adobe #CVE #infosec", "creation_timestamp": "2026-07-15T15:42:05.636920Z"}, {"uuid": "1661dc97-3668-497a-8458-d2ebc812178e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47996", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mqpgsxznzn2j", "content": "CVE-2026-47996 (HIGH) CVSS 7.6: https://experiencedigest.org/2026/07/15/151813.html", "creation_timestamp": "2026-07-15T19:18:57.036326Z"}, {"uuid": "d4965eca-4797-42ad-bf5c-70dd31ce7d2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47984", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqp5wuxymq2d", "content": "CVE-2026-47984 - commerce\nAdobe Commerce has a security flaw that could allow an attacker to access sensitive data without permission. This is a serious issue because it could lead to unauthorized changes or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#commerce #adobe #CVE #infosec", "creation_timestamp": "2026-07-15T16:40:04.346653Z"}, {"uuid": "61d1b3fd-1372-4d09-9b2e-c80e1e93eab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47156", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqpbjdjpio2a", "content": "CVE-2026-47156 - mantisbt\nA critical security issue in MantisBT's SOAP API allows any user with a valid cookie to impersonate another user, including the administrator, and access sensitive data. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#mantisbt #composer #CVE #infosec", "creation_timestamp": "2026-07-15T17:44:04.745191Z"}, {"uuid": "df72fc08-f552-41a0-8043-886bc9ceff34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47984", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mqpnidrfnv2p", "content": "CVE-2026-47984 (HIGH) CVSS 8.2: https://experiencedigest.org/2026/07/15/171646.html", "creation_timestamp": "2026-07-15T21:18:16.398406Z"}, {"uuid": "bc733bbe-cac1-4c42-848f-b8b4b0f1f5dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47999", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mqpu5kexd524", "content": "CVE-2026-47999 (MEDIUM) CVSS 4.8: https://experiencedigest.org/2026/07/15/57d101.html", "creation_timestamp": "2026-07-15T23:17:31.042942Z"}, {"uuid": "eb364881-f16b-4165-9fc0-08486a894f86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47829", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrixzikb2i", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4: \u05e4\u05d2\u05d9\u05e2\u05d4 \u05e7\u05e9\u05d4 \u05d1-BOSH Director - CVE-2026-47829 \u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05d4\u05d6\u05e8\u05e7\u05ea \u05e4\u05e7\u05d5\u05d3\u05d5\u05ea\n\n\n\nhttps://khesef.xyz/posts/1E50B942-3807-4182-9C2F-127043D81E23", "creation_timestamp": "2026-07-16T08:02:52.330502Z"}, {"uuid": "0385909e-361f-4056-a22e-9ccccc22544f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47828", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrjqqi2224", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4: \u05e4\u05d2\u05d9\u05e2\u05d4 \u05e7\u05e9\u05d4 \u05d1\u05d1\u05d5\u05e9 (BOSH) - CVE-2026-47828 \u05d5\u05de\u05d4 \u05d6\u05d4 \u05d0\u05d5\u05de\u05e8 \u05dc\u05da\n\n\n\nhttps://khesef.xyz/posts/7E9D4F6E-18C3-4905-A9F2-F84D89FEF391", "creation_timestamp": "2026-07-16T08:03:18.244305Z"}, {"uuid": "ac3a6f51-78be-4ff0-bbef-086e4611ab78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47665", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mu2psxjwhz26", "content": "CVE-2026-47665 - Stored XSS in Penpot design platform via file comments. CVSS 8.7. Restrict comment access and monitor for patches. #CVE #Penpot #cybersecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-47665/", "creation_timestamp": "2026-08-27T11:14:52.342191Z"}, {"uuid": "ed88c46b-d523-4eb4-a60d-24a2e114a035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47665", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117167180494505795", "content": "CVE-2026-47665 - Stored XSS in Penpot design platform via file comments. CVSS 8.7. Restrict comment access and monitor for patches. #CVE #Penpot #cybersecurity\nhttps://www.valtersit.com/cve/CVE-2026-47665/", "creation_timestamp": "2026-08-27T11:14:53.493363Z"}, {"uuid": "183b5bfc-9e3d-4988-8263-977a76684629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqr75ovixc2h", "content": "\ud83d\udccc CVE-2026-47301 - Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network. https://www.cyberhub.blog/cves/CVE-2026-47301", "creation_timestamp": "2026-07-16T12:07:06.379182Z"}, {"uuid": "a8a3240b-bef4-4744-a2ee-c76cf6996ebe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47632", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T12:48:21.674394Z"}, {"uuid": "a15b7f11-fd89-462a-b2fe-96182ebfeb61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47642", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T12:49:06.861910Z"}, {"uuid": "daac0eea-b61c-485a-8ba6-5b8d8e9b6043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4703", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtook3kbb42j", "content": "CVE-2026-4703 - ws form lite \u2013 drag & drop contact form builder\nThe WS Form LITE contact\u2011form plugin for WordPress can accept specially crafted data when a form is submitted, allowing anyone on the internet to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#westguard #CVE #infosec", "creation_timestamp": "2026-08-22T16:20:04.114956Z"}, {"uuid": "3c252a57-39cc-4431-8861-83b825fb299d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47282", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:22:22.826981Z"}, {"uuid": "6fb8fde6-8820-41f7-9755-5f28da7780d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4703", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtoukho2fl25", "content": "\ud83d\udea8 CVE-2026-4703 \u2014 CVSS 9.8 CRITICAL\n\nThe WS Form LITE \u2013 Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to PHP Object Inject...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-4703\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-22T18:07:39.014777Z"}, {"uuid": "6e4109c2-3fd9-439e-aa7b-8eb716778343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47295", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:45:12.146434Z"}, {"uuid": "df3f79d0-4036-4c1c-ad43-71d7a1a93dff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47290", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:45:23.191777Z"}, {"uuid": "ace3c721-9c1f-40e0-90c9-6d418850de23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47296", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:47:23.700935Z"}, {"uuid": "da3855b5-f812-4713-990a-00d14e694ee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47302", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:51:50.115964Z"}, {"uuid": "34fbacd0-f161-439a-9079-3fd7a523de00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47304", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:51:36.591688Z"}, {"uuid": "338cc3ab-4278-45d3-9098-cd0cb296a0b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4703", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtowfgmkhz2z", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\u300cWS Form LITE\u300d\u306bPHP\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u3002\u30d5\u30a9\u30fc\u30e0\u9001\u4fe1\u30e1\u30bf\u5024\u304b\u3089\u306e\u4fe1\u983c\u3067\u304d\u306a\u3044\u5165\u529b\u306e\u30c7\u30b7\u30ea\u30a2\u30e9\u30a4\u30bc\u30fc\u30b7\u30e7\u30f3\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c\u2026\nCVE-2026-4703 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-08-22T18:40:37.825081Z"}, {"uuid": "f27549ea-b7a5-44d7-bc0a-642d710ca61f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47305", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:51:34.386333Z"}, {"uuid": "1f4b80d5-3605-411d-b6dd-fe91900744f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:51:39.037182Z"}, {"uuid": "13575d24-0b56-4ec9-8c2e-cde6fe56ed21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47300", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:51:41.220848Z"}, {"uuid": "c923d96a-fc5c-4dc5-bb33-4a4048f79a63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47303", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:51:45.543275Z"}, {"uuid": "6681cf5b-5bc2-419a-8085-5ca9e00ff54f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47289", "type": "seen", "source": "https://infosec.exchange/users/0patch/statuses/116930013913795203", "content": "Micropatches released for Remote Desktop Client Remote Code Execution Vulnerability (CVE-2026-47289)https://0patch.com/blog/micropatches-released-for-remote-desktop-client-remote-code-execution-vulnerabili", "creation_timestamp": "2026-07-16T14:00:18.168943Z"}, {"uuid": "d34eee94-c8d4-4c88-a6b8-354ce64071ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47994", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqrj7lm3t52f", "content": "\ud83d\udccc CVE-2026-47994 - Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious ... https://www.cyberhub.blog/cves/CVE-2026-47994", "creation_timestamp": "2026-07-16T15:07:07.420499Z"}, {"uuid": "7a88d612-4f13-4a82-b623-581bdb9d9f47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47767", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqrkwx3e5w2d", "content": "CVE-2026-47767 - symfony\nVersions of Symfony from 5.4.46 to 5.4.52, 6.4.40, 7.4.12, and 8.0.12 have a security flaw. Attackers can use a specially crafted query string to bypass security settings,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#symfony #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-07-16T15:38:04.739262Z"}, {"uuid": "57f09a34-c5e2-45a1-87ba-83533dde40b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47988", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqrrlrzwyl26", "content": "\ud83d\udccc CVE-2026-47988 - Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this... https://www.cyberhub.blog/cves/CVE-2026-47988", "creation_timestamp": "2026-07-16T17:37:06.874460Z"}, {"uuid": "b1dcc6f8-6444-4c3f-a8fb-68c1afd3b82d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47883", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99157", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-47883\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a daehyuh\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-22 04:26:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-47883 PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:04.095320Z"}, {"uuid": "d1cfec49-b8c9-461b-8382-09520b39bef4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47083", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqrynypxle2w", "content": "CVE-2026-47083 - Cyrus IMAP ESEARCH Cross-User Information Disclosure\nCVE ID : CVE-2026-47083\n \n Published : July 16, 2026, 7:16 p.m. | 18\u00a0minutes ago\n \n Description : An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is an ESEARCH cross-user content o...", "creation_timestamp": "2026-07-16T19:43:36.719041Z"}, {"uuid": "aed95e01-6a3f-47ec-a505-2648f109d1ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47081", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqryzl5znz2w", "content": "CVE-2026-47081 - Cyrus IMAP XAPPLEPUSHSERVICE Information Disclosure and Push Hijack\nCVE ID : CVE-2026-47081\n \n Published : July 16, 2026, 7:16 p.m. | 18\u00a0minutes ago\n \n Description : An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is an XAPPLEPUSHSER...", "creation_timestamp": "2026-07-16T19:50:06.968294Z"}, {"uuid": "7b80d227-60b3-4040-ba60-e4ccd96c13f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47086", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqrzcxow2s2u", "content": "CVE-2026-47086 - Cyrus IMAP URLAUTH Token ACL Bypass\nCVE ID : CVE-2026-47086\n \n Published : July 16, 2026, 7:16 p.m. | 18\u00a0minutes ago\n \n Description : An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. GENURLAUTH-issued tokens can bypass ACLs. Any authenticat...", "creation_timestamp": "2026-07-16T19:55:20.459864Z"}, {"uuid": "28cce8b3-2b2f-4411-b8f1-0778000ef37d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47082", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqs24pqh472w", "content": "CVE-2026-47082 - Cyrus IMAP Vacation Feature ACL Bypass\nCVE ID : CVE-2026-47082\n \n Published : July 16, 2026, 7:16 p.m. | 18\u00a0minutes ago\n \n Description : An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. The vacation \"fcc\" feature skips the destination-mailb...", "creation_timestamp": "2026-07-16T20:09:44.535996Z"}, {"uuid": "78b645b0-4b7b-48d5-82aa-759a0810b9bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47084", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqs2foa2fl2m", "content": "CVE-2026-47084 - Cyrus IMAP Improper Access Control\nCVE ID : CVE-2026-47084\n \n Published : July 16, 2026, 7:16 p.m. | 18\u00a0minutes ago\n \n Description : An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. The LOCALDELETE command bypassed ACL checks. An authentica...", "creation_timestamp": "2026-07-16T20:14:50.371289Z"}, {"uuid": "41b7b37c-aed3-427e-afad-8fe996c2e0e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47089", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqs2xld7yc2n", "content": "CVE-2026-47089 - Cyrus IMAP Information Disclosure Vulnerability\nCVE ID : CVE-2026-47089\n \n Published : July 16, 2026, 7:16 p.m. | 18\u00a0minutes ago\n \n Description : An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. LISTRIGHTS os not limited to users with admin...", "creation_timestamp": "2026-07-16T20:24:46.138811Z"}, {"uuid": "619163a4-1de0-4ace-9782-54985fd692e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47085", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqs3ajrwot2x", "content": "CVE-2026-47085 - Cyrus IMAP URLAUTH Token Forgery Vulnerability\nCVE ID : CVE-2026-47085\n \n Published : July 16, 2026, 7:16 p.m. | 18\u00a0minutes ago\n \n Description : An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. URLAUTH token forgery can occur via a missing ...", "creation_timestamp": "2026-07-16T20:29:46.432832Z"}, {"uuid": "3e0090f4-a1e2-4d15-bdd2-a674935fd4c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47088", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqs3jia3bi2e", "content": "CVE-2026-47088 - Cyrus IMAP Heap Memory Exposure\nCVE ID : CVE-2026-47088\n \n Published : July 16, 2026, 7:16 p.m. | 18\u00a0minutes ago\n \n Description : An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is heap exposure in nested MIME comment parsing. An aut...", "creation_timestamp": "2026-07-16T20:34:46.915247Z"}, {"uuid": "3e5dbf1b-b58c-4102-9283-586755728ead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47087", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqs3ub7loi2l", "content": "CVE-2026-47087 - Cyrus IMAP URLAUTH Improper Access Control\nCVE ID : CVE-2026-47087\n \n Published : July 16, 2026, 7:16 p.m. | 18\u00a0minutes ago\n \n Description : An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. URLAUTH does not honor revoked authorizer access. ...", "creation_timestamp": "2026-07-16T20:40:48.484746Z"}, {"uuid": "cabcb6f7-3caa-4e43-a497-e50b0fe37566", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47117", "type": "seen", "source": "https://t.me/GithubRedTeam/98231", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-47117-openmed-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SaiTeja-Erukude\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 20:27:30\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOpenMed < 1.5.2 unauthenticated RCE via PII privacy-filter model loading and trust_remote_code=True\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:09.805377Z"}, {"uuid": "08e4fbeb-20ce-480b-8020-26264abe02a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47103", "type": "seen", "source": "https://t.me/GithubRedTeam/98239", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-47103-python-statemachine-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SaiTeja-Erukude\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 21:29:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPython StateMachine 3.0.0 < 3.2.0 RCE via unsafe SCXML  evaluation and Python eval() injection.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:09.890516Z"}, {"uuid": "070b0063-0152-40ac-80b0-bbc277110e2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47632", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqtc7hoifs2n", "content": "\ud83d\udccc CVE-2026-47632 - Improper certificate validation in Azure Monitor Agent allows an unauthorized attacker to elevate privileges over an adjacent network. https://www.cyberhub.blog/cves/CVE-2026-47632", "creation_timestamp": "2026-07-17T08:07:06.405608Z"}, {"uuid": "54f2c041-b424-4835-93cf-e1670b82a287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47323", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93804", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-47323\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-17 08:01:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-47323: Apache Camel CXF/Knative HeaderFilterStrategy missing inbound filtering, enabling Camel control-header injection (RCE via camel-exec) through CXF-RS/CXF-SOAP/Knative endpoints (fixed in 4.14.6/4.18.2/4.19.0)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T10:00:05.946271Z"}, {"uuid": "bfe370c4-5361-4b20-aa0c-aa906aac5ec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://t.me/P0x3k_1N73LL1G3NC3/416", "content": "SCCM-CVE-2026-47301-Remote-Code-Execution\n\nExploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path traversal, certificate verification bypass, and DLL hijacking to achieve SYSTEM-level code execution.\n\nBlog: Microsoft Configuration Manager RCE 0-Day Exploit Chain (SCCM \ud835\uddd6\ud835\udde9\ud835\uddd8-\ud835\udfee\ud835\udfec\ud835\udfee\ud835\udff2-\ud835\udff0\ud835\udff3\ud835\udfef\ud835\udfec\ud835\udfed)", "creation_timestamp": "2026-08-22T21:00:04.973212Z"}, {"uuid": "2d9fa601-bc9f-4d67-834a-5fc8688f5d12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47086", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116936209500632721", "content": "Attention, elevated activities detected targeting cyrusimap Cyrus IMAP (CVE-2026-47086) https://vuldb.com/vuln/379618/cti", "creation_timestamp": "2026-07-17T16:15:57.416584Z"}, {"uuid": "9921e3f4-23a2-4a9b-89d6-e37bf63fd2a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47865", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mqu4ttfbde2i", "content": "~Cybergcca~\nThree advisories covering critical FreePBX RCE/SQLi, VMware Avi Load Balancer vulns, and Google Chrome desktop updates.\n-\nIOCs: CVE-2026-47865, CVE-2026-47866, CVE-2026-47867\n-\n#Chrome #FreePBX #ThreatIntel #VMware", "creation_timestamp": "2026-07-17T16:03:47.050501Z"}, {"uuid": "1c46a089-d937-448a-b46c-5cd206a53948", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47866", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mqu4ttfbde2i", "content": "~Cybergcca~\nThree advisories covering critical FreePBX RCE/SQLi, VMware Avi Load Balancer vulns, and Google Chrome desktop updates.\n-\nIOCs: CVE-2026-47865, CVE-2026-47866, CVE-2026-47867\n-\n#Chrome #FreePBX #ThreatIntel #VMware", "creation_timestamp": "2026-07-17T16:03:47.116489Z"}, {"uuid": "a0cee18d-afad-43f3-a428-2746f93ea13e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47867", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mqu4ttfbde2i", "content": "~Cybergcca~\nThree advisories covering critical FreePBX RCE/SQLi, VMware Avi Load Balancer vulns, and Google Chrome desktop updates.\n-\nIOCs: CVE-2026-47865, CVE-2026-47866, CVE-2026-47867\n-\n#Chrome #FreePBX #ThreatIntel #VMware", "creation_timestamp": "2026-07-17T16:03:47.172930Z"}, {"uuid": "897c5cbf-4a3e-4680-8447-c30e6409ec84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47868", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/broadcom-vmware-security-advisory-av26-712", "content": "", "creation_timestamp": "2026-07-17T16:15:09.870116Z"}, {"uuid": "2832d88b-7f6a-4e4e-97c8-01331b2ba7cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47869", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/broadcom-vmware-security-advisory-av26-712", "content": "", "creation_timestamp": "2026-07-17T16:15:12.088201Z"}, {"uuid": "2020d4d9-511b-4aac-a453-f5b0f1f368cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47865", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/broadcom-vmware-security-advisory-av26-712", "content": "", "creation_timestamp": "2026-07-17T16:15:14.267941Z"}, {"uuid": "3452fa97-b626-4e3b-9eec-4febc5c31e4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47871", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/broadcom-vmware-security-advisory-av26-712", "content": "", "creation_timestamp": "2026-07-17T16:15:16.513579Z"}, {"uuid": "529b9d10-4e19-4f07-9377-c358bcbfaf94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47870", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/broadcom-vmware-security-advisory-av26-712", "content": "", "creation_timestamp": "2026-07-17T16:15:18.722573Z"}, {"uuid": "7a7a8ae2-60ff-44cd-a2e0-f2b33171a761", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47866", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/broadcom-vmware-security-advisory-av26-712", "content": "", "creation_timestamp": "2026-07-17T16:15:20.889535Z"}, {"uuid": "d151ff17-0d9b-4efe-85da-8326f1d820b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47867", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/broadcom-vmware-security-advisory-av26-712", "content": "", "creation_timestamp": "2026-07-17T16:15:23.060819Z"}, {"uuid": "e427d50b-3507-456b-ac35-0681ea822a7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47184", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquk3hsae622", "content": "CVE-2026-47184 - Zeroconf: Unbounded DNS record cache allows LAN-local memory exhaustion via multicast flood\nCVE ID : CVE-2026-47184\n \n Published : July 17, 2026, 7:17 p.m. | 21\u00a0minutes ago\n \n Description : Zeroconf is a pure Python implementation of multicast DNS service disc...", "creation_timestamp": "2026-07-17T20:00:42.077688Z"}, {"uuid": "f09d17ba-38b6-4cb9-9310-ed724bab6a7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47180", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquk7cskbr2q", "content": "CVE-2026-47180 - Zeroconf: Unbounded recursion in DNS compression-pointer decoder allows LAN-local denial of service\nCVE ID : CVE-2026-47180\n \n Published : July 17, 2026, 7:17 p.m. | 21\u00a0minutes ago\n \n Description : Zeroconf is a pure Python implementation of multicast DNS serv...", "creation_timestamp": "2026-07-17T20:02:51.207597Z"}, {"uuid": "bda9767d-dac0-4657-81d2-aa980d3238d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47183", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqukmt4krc23", "content": "CVE-2026-47183 - Zeroconf: Unbounded exception-dedup state retains packet buffers via traceback frame locals, enabling LAN-local memory exhaustion\nCVE ID : CVE-2026-47183\n \n Published : July 17, 2026, 7:17 p.m. | 21\u00a0minutes ago\n \n Description : Zeroconf is a pure Python implem...", "creation_timestamp": "2026-07-17T20:10:24.455647Z"}, {"uuid": "dd6263f4-bbd9-4836-aaa3-e08f9f808921", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47767", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqust5nucc2y", "content": "\ud83d\udccc CVE-2026-47767 - Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 5.4.46 until 5.4.52, 6.4.40, 7.4.12, and 8.0.12... https://www.cyberhub.blog/cves/CVE-2026-47767", "creation_timestamp": "2026-07-17T22:37:06.557938Z"}, {"uuid": "a1ee0d13-315c-4541-a218-89dba185d9d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47851", "type": "published-proof-of-concept", "source": "Telegram/CcRo1gMZwWwNofZNwYOQ3d2hQNvA4xaZ28UNdx64Ma-ZFGg", "content": "", "creation_timestamp": "2026-08-31T00:00:44.257735Z"}, {"uuid": "5f792bbf-1e11-413a-b5a5-f2094d75f99e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4703", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtp676cwhk2o", "content": "\ud83d\udd34 CVE-2026-4703 - Critical (9.8)\n\nThe WS Form LITE \u2013 Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to PHP O...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-4703/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T21:00:19.376138Z"}, {"uuid": "72713d86-c0c2-41c7-b834-95f474fb1695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47865", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqvxcqwvqc2e", "content": "CVE-2026-47865 - avi load balancer\nVMware Avi Load Balancer versions 31.1.1 to 31.2.2 and earlier versions 30.1.1 to 30.2.6 and 22.1.1 to 22.1.7 may allow unauthorized access to the system. This is a security risk\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vmware #CVE #infosec", "creation_timestamp": "2026-07-18T09:30:04.943165Z"}, {"uuid": "c90ff9ef-2075-49bd-821a-c34a9c6d356d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47851", "type": "published-proof-of-concept", "source": "Telegram/7flft83Vjf6wLqlUx37f8i8JmZrWmYSQ64bCcsTKPPshTgs", "content": "", "creation_timestamp": "2026-08-28T00:00:35.976223Z"}, {"uuid": "419fd9fd-6486-4340-a8e2-705b87c45ff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47866", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqvyzcjlys2l", "content": "\ud83d\udfe0 CVE-2026-47866 - High (8.3)\n\nVMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor on the...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47866/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T10:00:35.766903Z"}, {"uuid": "bc999cb1-6dee-421d-bcbc-fadea8832652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47865", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqvyz45asp2u", "content": "\ud83d\udd34 CVE-2026-47865 - Critical (9.8)\n\nVMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user with n...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47865/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T10:00:29.123864Z"}, {"uuid": "d24a67df-07bd-40de-8499-3907809baf67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47895", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtpev7s4kt26", "content": "\ud83d\udfe0 CVE-2026-47895 - High (7.5)\n\nIn strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that re...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47895/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T23:00:00.567752Z"}, {"uuid": "1c61263f-702e-49d7-a6f2-f40fcba64603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47867", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqvyzj5ecs2q", "content": "\ud83d\udfe0 CVE-2026-47867 - High (8.7)\n\nVMware Avi Load Balancer contains a remote code execution vulnerability. A malicious user with ne...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47867/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T10:00:42.643766Z"}, {"uuid": "b6b7bfb3-58fa-4f0f-b9b5-ee2ad5e58c95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47868", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqvz2qynrv2w", "content": "\ud83d\udfe0 CVE-2026-47868 - High (7.8)\n\nVMware Avi Load Balancer contains a local privilege escalation vulnerability. A malicious user wi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47868/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T10:01:24.258177Z"}, {"uuid": "d5143678-7385-48d9-9269-d4f45fe979e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47869", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqvz2xjjh42f", "content": "\ud83d\udfe0 CVE-2026-47869 - High (8.7)\n\nVMware Avi Load Balancer contains a remote code execution vulnerability. A malicious authenticate...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47869/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T10:01:31.502028Z"}, {"uuid": "7ea7d2ae-abc4-44f3-822a-17916fb11342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47871", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqvz35y5on2w", "content": "\ud83d\udfe0 CVE-2026-47871 - High (8.8)\n\nVMware Avi Load Balancer contains a directory traversal vulnerability. Flaws in file path validat...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47871/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T10:01:38.755882Z"}, {"uuid": "bb5528f0-e567-43d2-90d4-fcf62c36739e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47851", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mu2zs4d42o2g", "content": "PDF\u306e\u76ee\u6b21\u89e3\u6790\u3067\u3001\u6df1\u3044\u30cd\u30b9\u30c8\u3084\u5faa\u74b0\u69cb\u9020\u304c\u3042\u308b\u3068\u3001\u53d6\u308a\u8fbc\u307f\u30b9\u30ec\u30c3\u30c9\u3067\u30b9\u30bf\u30c3\u30af\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u30a8\u30e9\u30fc\u304c\u767a\u751f\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-47851 CVSS 7.5 | HIGH", "creation_timestamp": "2026-08-27T14:13:22.107477Z"}, {"uuid": "08804aa2-9f8b-46e6-abc8-d9e3adb31cfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47866", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqw6udjcgr2q", "content": "CVE-2026-47866 - VMware Avi Load Balancer Authorization Bypass Vulnerability\nCVE ID : CVE-2026-47866\n \n Published : July 18, 2026, 9:17 a.m. | 2\u00a0hours, 22\u00a0minutes ago\n \n Description : VMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor on...", "creation_timestamp": "2026-07-18T11:45:10.989713Z"}, {"uuid": "c02bfbc0-b72f-4210-aa18-11b15b51540d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47867", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqw72cn7cy2a", "content": "CVE-2026-47867 - VMware Avi Load Balancer Remote Code Execution Vulnerability\nCVE ID : CVE-2026-47867\n \n Published : July 18, 2026, 9:17 a.m. | 2\u00a0hours, 22\u00a0minutes ago\n \n Description : VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious user wi...", "creation_timestamp": "2026-07-18T11:48:31.464028Z"}, {"uuid": "d51e51b8-b266-4361-9259-67fb82f95109", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47865", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqw7azl65n2q", "content": "CVE-2026-47865 - VMware Avi Load Balancer Authentication Bypass Vulnerability\nCVE ID : CVE-2026-47865\n \n Published : July 18, 2026, 9:17 a.m. | 2\u00a0hours, 22\u00a0minutes ago\n \n Description : VMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user w...", "creation_timestamp": "2026-07-18T11:52:16.828204Z"}, {"uuid": "0521996a-3737-4214-aa27-ba14e3c842b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47870", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqw7rnnoqs23", "content": "CVE-2026-47870 - VMware Avi Load Balancer Privilege Escalation Vulnerability\nCVE ID : CVE-2026-47870\n \n Published : July 18, 2026, 9:17 a.m. | 2\u00a0hours, 22\u00a0minutes ago\n \n Description : VMware Avi Load Balancer contains a privilege escalation vulnerability. A malicious authentic...", "creation_timestamp": "2026-07-18T12:01:34.663608Z"}, {"uuid": "a6a14fe9-91f2-4c68-bb2e-786a7cd8631b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47871", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqwa2m7vzg2q", "content": "CVE-2026-47871 - VMware Avi Load Balancer Directory Traversal Vulnerability\nCVE ID : CVE-2026-47871\n \n Published : July 18, 2026, 9:17 a.m. | 2\u00a0hours, 22\u00a0minutes ago\n \n Description : VMware Avi Load Balancer contains a directory traversal vulnerability. Flaws in file path vali...", "creation_timestamp": "2026-07-18T12:06:35.459492Z"}, {"uuid": "c36279f0-4eb1-4203-9acd-e1be3d0901d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47868", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqwadkwhvb2a", "content": "CVE-2026-47868 - VMware Avi Load Balancer Local Privilege Escalation Vulnerability\nCVE ID : CVE-2026-47868\n \n Published : July 18, 2026, 9:17 a.m. | 2\u00a0hours, 22\u00a0minutes ago\n \n Description : VMware Avi Load Balancer contains a local privilege escalation vulnerability. A malicio...", "creation_timestamp": "2026-07-18T12:11:35.945080Z"}, {"uuid": "7d215dfc-a9c5-4d1b-9366-2b5f5f64e410", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47869", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqwamjilao22", "content": "CVE-2026-47869 - VMware Avi Load Balancer Remote Code Execution Vulnerability\nCVE ID : CVE-2026-47869\n \n Published : July 18, 2026, 9:17 a.m. | 2\u00a0hours, 22\u00a0minutes ago\n \n Description : VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious authent...", "creation_timestamp": "2026-07-18T12:16:36.448598Z"}, {"uuid": "135dec2e-c800-4d89-b7a0-b70858392962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "published-proof-of-concept", "source": "https://t.me/P0x3k_1N73LL1G3NC3/416", "content": "SCCM-CVE-2026-47301-Remote-Code-Execution\n\nExploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path traversal, certificate verification bypass, and DLL hijacking to achieve SYSTEM-level code execution.\n\nBlog: Microsoft Configuration Manager RCE 0-Day Exploit Chain (SCCM \ud835\uddd6\ud835\udde9\ud835\uddd8-\ud835\udfee\ud835\udfec\ud835\udfee\ud835\udff2-\ud835\udff0\ud835\udff3\ud835\udfef\ud835\udfec\ud835\udfed)", "creation_timestamp": "2026-08-23T00:00:13.242611Z"}, {"uuid": "b1ee6d03-69a9-448a-ba43-ed039809a4ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47984", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqz2mdjne526", "content": "\ud83d\udccc CVE-2026-47984 - Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this... https://www.cyberhub.blog/cves/CVE-2026-47984", "creation_timestamp": "2026-07-19T15:07:07.232906Z"}, {"uuid": "89218ac1-b640-47c3-a98e-6d1180e7b30e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://t.me/critical_bug/1713", "content": "\ud83d\udc31 *hacker voice* I'M IN \ud83d\udd34\n\n\ud83d\udd25 CVE-2026-4747: \u0418\u0418 \u0432\u0437\u043b\u043e\u043c\u0430\u043b FreeBSD \u0437\u0430 4 \u0447\u0430\u0441\u0430 \u2014 Remote Kernel RCE \u0441 root-\u0448\u0435\u043b\u043b\u043e\u043c \ud83d\udd34\n\nCVSS: 9.8 Critical | \u0410\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f | \u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 FreeBSD \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439\n\n26 \u043c\u0430\u0440\u0442\u0430 2026 \u0433\u043e\u0434\u0430 FreeBSD \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438 \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0418\u0418 (Claude \u043e\u0442 Anthropic) \u2014 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0432 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0418\u0418 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0430\u043f\u0438\u0441\u0430\u043b \u0440\u0430\u0431\u043e\u0447\u0438\u0439 kernel-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442! \ud83e\udd16\ud83d\udc80\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u041c\u043e\u0434\u0443\u043b\u044c \u044f\u0434\u0440\u0430 kgssapi.ko \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u043f\u0430\u043a\u0435\u0442\u044b RPCSEC_GSS (NFS + Kerberos). \u041f\u0440\u0438 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0431\u0443\u0444\u0435\u0440 \u043d\u0430 \u0441\u0442\u0435\u043a\u0435 \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0440\u0430\u0437\u043c\u0435\u0440\u0430. \u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u2014 stack-based buffer overflow. \u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f! \ud83d\ude31\n\n\ud83c\udfaf \u041a\u0430\u043a \u044d\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442:\n\u0421\u043f\u0435\u0446\u043f\u0430\u043a\u0435\u0442\u044b \u2192 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0441\u0442\u0435\u043a\u0430 \u044f\u0434\u0440\u0430 \u2192 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u043f\u043e\u0442\u043e\u043a\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u2192 root-\u0448\u0435\u043b\u043b. Claude \u0440\u0435\u0448\u0438\u043b \u0437\u0430\u0434\u0430\u0447\u0443 \u0437\u0430 ~4 \u0447\u0430\u0441\u0430, \u043d\u0430\u043f\u0438\u0441\u0430\u0432 2 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430!\n\n\ud83d\udea8 \u0418\u043c\u043f\u0430\u043a\u0442:\n\u2014 \u041f\u043e\u043b\u043d\u044b\u0439 root-\u0434\u043e\u0441\u0442\u0443\u043f \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438\n\u2014 RCE \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u044f\u0434\u0440\u0430\n\u2014 \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432, \u043a\u0440\u0430\u0436\u0430 \u0434\u0430\u043d\u043d\u044b\u0445\n\u2014 \u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b FreeBSD 13.x, 14.x, 15.x\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n1\ufe0f\u20e3 \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e: 15.0-RELEASE-p5, 14.4-RELEASE-p1, 14.3-RELEASE-p10, 13.5-RELEASE-p11\n2\ufe0f\u20e3 \u0412\u044b\u0433\u0440\u0443\u0437\u0438\u0442\u044c kgssapi.ko \u0435\u0441\u043b\u0438 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0435 NFS+Kerberos\n3\ufe0f\u20e3 \u0417\u0430\u043a\u0440\u044b\u0442\u044c NFS-\u043f\u043e\u0440\u0442\u044b \u043e\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 PDF \u043d\u0438\u0436\u0435! \ud83d\udc47\n\n\u2b50\ufe0f \u042d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b 0-day \u043f\u0435\u0440\u0432\u044b\u043c \u2014 VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su \ud83d\ude80\n\n#FreeBSD #CVE #ZeroDay #RCE #KernelExploit #AI #CyberSecurity #Infosec #critical_bug", "creation_timestamp": "2026-07-19T16:00:10.256501Z"}, {"uuid": "b3b2d431-0160-461f-a46c-33f2d67981b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://t.me/critical_bug/1714", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-4747: Remote Kernel RCE \u0432\u043e FreeBSD (CVSS 9.8)", "creation_timestamp": "2026-07-19T16:00:10.291130Z"}, {"uuid": "f1c36eb6-5b12-4375-b449-8eba3471b793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47644", "type": "seen", "source": "https://bsky.app/profile/smit-artem.bsky.social/post/3mqzedczkbn2o", "content": "Heads up: an important security fix just landed for Microsoft Copilot Chat. Open its settings and let it update. A couple of taps now keeps your data safer. CVE-2026-47644", "creation_timestamp": "2026-07-19T18:01:01.848242Z"}, {"uuid": "b0a7e770-a1dd-45bd-98e7-67586aa0716b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "exploited", "source": "https://t.me/critical_bug/1713", "content": "\ud83d\udc31 *hacker voice* I'M IN \ud83d\udd34\n\n\ud83d\udd25 CVE-2026-4747: \u0418\u0418 \u0432\u0437\u043b\u043e\u043c\u0430\u043b FreeBSD \u0437\u0430 4 \u0447\u0430\u0441\u0430 \u2014 Remote Kernel RCE \u0441 root-\u0448\u0435\u043b\u043b\u043e\u043c \ud83d\udd34\n\nCVSS: 9.8 Critical | \u0410\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f | \u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 FreeBSD \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439\n\n26 \u043c\u0430\u0440\u0442\u0430 2026 \u0433\u043e\u0434\u0430 FreeBSD \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438 \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0418\u0418 (Claude \u043e\u0442 Anthropic) \u2014 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0432 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0418\u0418 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0430\u043f\u0438\u0441\u0430\u043b \u0440\u0430\u0431\u043e\u0447\u0438\u0439 kernel-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442! \ud83e\udd16\ud83d\udc80\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u041c\u043e\u0434\u0443\u043b\u044c \u044f\u0434\u0440\u0430 kgssapi.ko \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u043f\u0430\u043a\u0435\u0442\u044b RPCSEC_GSS (NFS + Kerberos). \u041f\u0440\u0438 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0431\u0443\u0444\u0435\u0440 \u043d\u0430 \u0441\u0442\u0435\u043a\u0435 \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0440\u0430\u0437\u043c\u0435\u0440\u0430. \u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u2014 stack-based buffer overflow. \u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f! \ud83d\ude31\n\n\ud83c\udfaf \u041a\u0430\u043a \u044d\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442:\n\u0421\u043f\u0435\u0446\u043f\u0430\u043a\u0435\u0442\u044b \u2192 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0441\u0442\u0435\u043a\u0430 \u044f\u0434\u0440\u0430 \u2192 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u043f\u043e\u0442\u043e\u043a\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u2192 root-\u0448\u0435\u043b\u043b. Claude \u0440\u0435\u0448\u0438\u043b \u0437\u0430\u0434\u0430\u0447\u0443 \u0437\u0430 ~4 \u0447\u0430\u0441\u0430, \u043d\u0430\u043f\u0438\u0441\u0430\u0432 2 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430!\n\n\ud83d\udea8 \u0418\u043c\u043f\u0430\u043a\u0442:\n\u2014 \u041f\u043e\u043b\u043d\u044b\u0439 root-\u0434\u043e\u0441\u0442\u0443\u043f \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438\n\u2014 RCE \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u044f\u0434\u0440\u0430\n\u2014 \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432, \u043a\u0440\u0430\u0436\u0430 \u0434\u0430\u043d\u043d\u044b\u0445\n\u2014 \u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b FreeBSD 13.x, 14.x, 15.x\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n1\ufe0f\u20e3 \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e: 15.0-RELEASE-p5, 14.4-RELEASE-p1, 14.3-RELEASE-p10, 13.5-RELEASE-p11\n2\ufe0f\u20e3 \u0412\u044b\u0433\u0440\u0443\u0437\u0438\u0442\u044c kgssapi.ko \u0435\u0441\u043b\u0438 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0435 NFS+Kerberos\n3\ufe0f\u20e3 \u0417\u0430\u043a\u0440\u044b\u0442\u044c NFS-\u043f\u043e\u0440\u0442\u044b \u043e\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 PDF \u043d\u0438\u0436\u0435! \ud83d\udc47\n\n\u2b50\ufe0f \u042d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b 0-day \u043f\u0435\u0440\u0432\u044b\u043c \u2014 VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su \ud83d\ude80\n\n#FreeBSD #CVE #ZeroDay #RCE #KernelExploit #AI #CyberSecurity #Infosec #critical_bug", "creation_timestamp": "2026-07-20T00:00:07.290520Z"}, {"uuid": "48997332-4a98-40a6-8439-5e46677e0817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "published-proof-of-concept", "source": "https://t.me/critical_bug/1714", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-4747: Remote Kernel RCE \u0432\u043e FreeBSD (CVSS 9.8)", "creation_timestamp": "2026-07-20T00:00:07.256048Z"}, {"uuid": "122e5afe-0156-4835-af9f-fc0a1e1aea74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47296", "type": "seen", "source": "https://gist.github.com/alon710/b22bbe2f241e5aee1cd66aaa6dd091ce", "content": "# CVE-2026-47296: CVE-2026-47296: Elevation of Privilege via SQL Injection in Microsoft SQL Server Internal Stored Procedures\n\n> **CVSS Score:** 7.8\n> **Published:** 2026-07-14\n> **Full Report:** https://cvereports.com/reports/CVE-2026-47296\n\n## Summary\nCVE-2026-47296 is a high-severity local Elevation of Privilege (EoP) vulnerability in Microsoft SQL Server. The issue stems from the improper neutralization of special elements within internal database routines, allowing a low-privileged authenticated user to execute arbitrary database queries with the privileges of the database owner or system administrator. Microsoft has addressed this vulnerability in its July 2026 security updates.\n\n## TL;DR\nAn authenticated, low-privileged local attacker can exploit SQL command injection in SQL Server's internal administrative procedures to escalate privileges to sysadmin, gaining complete administrative control over the affected database instance.\n\n## Technical Details\n\n- **CWE ID**: CWE-89 (SQL Injection)\n- **Attack Vector**: Local (Authenticated)\n- **CVSS v3.1 Base Score**: 7.8\n- **EPSS Score**: 0.00232\n- **Impact Type**: Privilege Escalation (up to sysadmin)\n- **Exploit Status**: none (no public PoC available)\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Microsoft SQL Server 2016\n- Microsoft SQL Server 2017\n- Microsoft SQL Server 2019\n- Microsoft SQL Server 2022\n- Microsoft SQL Server 2025\n- **SQL Server 2025**: >= 17.0.1000.7 and < 17.0.1125.2 (GDR) (Fixed in: `17.0.1125.2`)\n- **SQL Server 2022**: >= 16.0.1000.6 and < 16.0.1190.2 (GDR) (Fixed in: `16.0.1190.2`)\n- **SQL Server 2019**: >= 15.0.2000.5 and < 15.0.2180.2 (GDR) (Fixed in: `15.0.2180.2`)\n- **SQL Server 2017**: >= 14.0.1000.169 and < 14.0.2120.1 (GDR) (Fixed in: `14.0.2120.1`)\n- **SQL Server 2016 SP3**: >= 13.0.6300.2 and < 13.0.6500.1 (GDR) (Fixed in: `13.0.6500.1`)\n\n## Mitigation\n\n- Apply security updates released by Microsoft during the July 2026 release cycle\n- Establish rigid access control lists (ACLs) to restrict access to internal database schemas and system stored procedures\n- Disable execution context switching (EXECUTE AS) for unvetted system or custom procedures\n- Implement rigorous database auditing to detect role membership modifications\n\n**Remediation Steps:**\n1. Identify the patch level of all active SQL Server instances by executing: SELECT @@VERSION;\n2. Download the corresponding Cumulative Update (CU) or General Distribution Release (GDR) package from the Microsoft Update Catalog\n3. Apply the security update to the instance during a scheduled maintenance window\n4. Verify the update build number aligns with the official fixed versions listed in the vendor advisory\n\n## References\n\n- [Microsoft Security Response Center (MSRC) Update Guide](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47296)\n- [CVE.org Official Record](https://www.cve.org/CVERecord?id=CVE-2026-47296)\n- [National Vulnerability Database (NVD) Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-47296)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-47296) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-20T11:01:19.962012Z"}, {"uuid": "fe5d4eae-836b-4c0a-b0a8-c55dd5163d03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47295", "type": "seen", "source": "https://gist.github.com/alon710/3b6e218ec0b0dad08bac52f3df60b532", "content": "# CVE-2026-47295: CVE-2026-47295: SQL Injection and Privilege Escalation in Microsoft SQL Server\n\n> **CVSS Score:** 8.8\n> **Published:** 2026-07-14\n> **Full Report:** https://cvereports.com/reports/CVE-2026-47295\n\n## Summary\nCVE-2026-47295 is a high-severity elevation of privilege vulnerability in Microsoft SQL Server (2016 through 2025). An authenticated, low-privileged attacker can execute remote SQL injection commands within system stored procedures to elevate permissions to sysadmin.\n\n## TL;DR\nAn authenticated, low-privileged network attacker can execute SQL injection attacks against internal system stored procedures in Microsoft SQL Server, leading to full privilege escalation up to sysadmin administrative control.\n\n## Technical Details\n\n- **CWE ID**: CWE-89 (SQL Injection)\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 8.8\n- **EPSS Score**: 0.00921 (0.92%)\n- **Impact**: Complete Privilege Escalation to sysadmin\n- **Exploit Status**: None (Theoretical)\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Microsoft SQL Server 2016\n- Microsoft SQL Server 2017\n- Microsoft SQL Server 2019\n- Microsoft SQL Server 2022\n- Microsoft SQL Server 2025\n- **SQL Server 2016 Service Pack 3**: >= 13.0.0 < 13.0.6500.1 (Fixed in: `13.0.6500.1`)\n- **SQL Server 2017**: >= 14.0.0 < 14.0.2120.1 (Fixed in: `14.0.2120.1`)\n- **SQL Server 2019**: >= 15.0.0 < 15.0.2180.2 (Fixed in: `15.0.2180.2`)\n- **SQL Server 2022**: >= 16.0.0 < 16.0.1190.2 (Fixed in: `16.0.1190.2`)\n- **SQL Server 2025**: >= 17.0.0 < 17.0.1125.2 (Fixed in: `17.0.1125.2`)\n\n## Mitigation\n\n- Apply the official GDR and Cumulative Update patches provided by Microsoft.\n- Isolate the SQL Server port interfaces behind local firewalls to prevent raw network access.\n- Revoke EXECUTE permissions from public roles on administrative system procedures.\n- Enable SQL Server Audit mechanisms to detect unauthorized role modifications.\n\n**Remediation Steps:**\n1. Determine the installed edition and version level of the SQL Server database instance.\n2. Download the matching security update package from the Microsoft Update Catalog.\n3. Schedule database maintenance windows and apply the cumulative or GDR patch.\n4. Verify that the database build version matches the patched threshold.\n5. Configure Extended Events or Server Audits to monitor for administrative role promotions.\n\n## References\n\n- [Microsoft Security Response Center (MSRC) Advisory](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47295)\n- [CVE.org Official Record](https://www.cve.org/CVERecord?id=CVE-2026-47295)\n- [Wiz Vulnerability Database Details](https://www.wiz.io/vulnerability-database/cve/cve-2026-47295)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-47295) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-20T11:01:21.708995Z"}, {"uuid": "0e9aa9f0-d228-4f57-9b98-25bec566b032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47323", "type": "seen", "source": "Telegram/_1aH9U5OrIpGhndKfVcAzFKVC5sR_AJ7SIBHQMpkCGSufcw", "content": "", "creation_timestamp": "2026-07-20T18:00:06.689228Z"}, {"uuid": "c8a6b219-e41f-4baa-982c-e1cef3dda7f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47276", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3xu3qyb32b", "content": "CVE-2026-47276 - NULL Pointer Dereference in REST API properties_parse via Malformed user_properties\nCVE ID : CVE-2026-47276\n \n Published : July 20, 2026, 5:17 p.m. | 27\u00a0minutes ago\n \n Description : In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in `propert...", "creation_timestamp": "2026-07-20T18:55:49.353681Z"}, {"uuid": "4bdb7f47-2fa2-49be-8140-afb6067da661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4703", "type": "seen", "source": "Telegram/6MOWzdsuBRUfSRyh2aRpTFk-sLxYOyyrOXiUm5uMNWePPGY", "content": "", "creation_timestamp": "2026-08-24T21:00:06.094960Z"}, {"uuid": "adece9c2-6c90-4cd6-805a-4b8bab49a4c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47198", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr4c6mw66j22", "content": "\ud83d\udfe0 CVE-2026-47198 - High (8.5)\n\nPaymenter is a free and open-source webshop solution for management of hosting services. In versi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47198/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-20T22:00:36.605057Z"}, {"uuid": "b6398433-41dd-451b-8362-928df4f6a789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47129", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr4c7cpj5n2o", "content": "CVE-2026-47129 - NextCRM has Broken Access Control in Server Actions that allows any authenticated user to deactivate/activate arbitrary accounts\nCVE ID : CVE-2026-47129\n \n Published : July 20, 2026, 9:16 p.m. | 28\u00a0minutes ago\n \n Description : NextCRM is open-source customer r...", "creation_timestamp": "2026-07-20T22:00:58.754094Z"}, {"uuid": "0355172a-6545-49d8-926a-599bc8bbd3b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47129", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr4cbe5sa32x", "content": "\ud83d\udfe0 CVE-2026-47129 - High (8.1)\n\nNextCRM is open-source customer relationship management (CRM) software. Versions prior to 0.12.0 ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47129/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-20T22:02:08.068872Z"}, {"uuid": "a7aa43a5-0600-44e6-bfb5-de8f4acb685e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47130", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr4cfts2ly27", "content": "CVE-2026-47130 - NextCRM has a BOLA/IDOR in PATCH /api/crm/contacts/[id] that allows Cross-Tenant CRM Data Tampering\nCVE ID : CVE-2026-47130\n \n Published : July 20, 2026, 9:16 p.m. | 28\u00a0minutes ago\n \n Description : NextCRM is open-source customer relationship management (CRM) ...", "creation_timestamp": "2026-07-20T22:04:38.032090Z"}, {"uuid": "9e5afa76-645f-48c1-8d1f-2fbece5e34ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47134", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr4cvvfytm2j", "content": "CVE-2026-47134 - ClearanceKit: Policy signing key in System Keychain has permissive ACL allowing any local-root process to forge signed policy\nCVE ID : CVE-2026-47134\n \n Published : July 20, 2026, 9:17 p.m. | 27\u00a0minutes ago\n \n Description : ClearanceKit intercepts file-system ...", "creation_timestamp": "2026-07-20T22:13:36.720251Z"}, {"uuid": "662f3c71-31b8-4329-af85-4469c8bd207c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47198", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr4d2rwowl2e", "content": "CVE-2026-47198 - Paymenter: URL parameter injection bypasses paid plan limits at checkout\nCVE ID : CVE-2026-47198\n \n Published : July 20, 2026, 9:16 p.m. | 28\u00a0minutes ago\n \n Description : Paymenter is a free and open-source webshop solution for management of hosting services. ...", "creation_timestamp": "2026-07-20T22:16:20.911045Z"}, {"uuid": "fea32c93-617e-4d42-9211-3f8379a94936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47630", "type": "seen", "source": "Telegram/3uoG5wFLf24Ez4I576aLMwFbbZgYXdBfxkZjcO29_lRuMU0", "content": "", "creation_timestamp": "2026-08-24T21:00:06.419102Z"}, {"uuid": "56dce160-fb96-4836-a2ee-913d10c4e21f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47304", "type": "seen", "source": "https://gist.github.com/djlan/d81fa75ac9dfa4107c814926e03d1338", "content": "# PR \u89e3\u91ca: [SECURITY] Bump System.Security.Cryptography.Xml from 8.0.3 to 8.0.4\n\n\u8be5 PR \u901a\u8fc7\u96c6\u4e2d\u9501\u5b9a\u4fee\u590d\u7248\u672c\uff0c\u5347\u7ea7 XML \u52a0\u5bc6\u4f9d\u8d56\u4ee5\u6d88\u9664\u7ec4\u4ef6\u6cbb\u7406\u68c0\u6d4b\u5230\u7684\u9ad8\u5371\u5b89\u5168\u544a\u8b66\u3002\n\n**PR \u94fe\u63a5**: https://dev.azure.com/msdata/A365/_git/Synapse-NotebookService/pullrequest/2264362\n**\u4f5c\u8005**: Dependabot\n**\u72b6\u6001**: active\n**\u5206\u652f**: `dependabot/nuget/src%2FServices/System.Security.Cryptography.Xml-8.0.4-3742010` \u2192 `master`\n**\u53d8\u66f4\u7edf\u8ba1**: 2 files changed, +1/-1 lines\uff08\u6e90\u6587\u4ef6\u4ec5\u5c55\u793a\u4e00\u4e2a\u6587\u4ef6\u7684\u53ef\u89c1\u5dee\u5f02\u7edf\u8ba1\uff09\n\n## \u76ee\u5f55\n- [\u53d8\u66f4\u6982\u89c8](#\u53d8\u66f4\u6982\u89c8)\n- [\u5f71\u54cd\u5206\u6790](#\u5f71\u54cd\u5206\u6790)\n\n---\n\n## \u53d8\u66f4\u6982\u89c8\n\n### 1. NuGet \u4f9d\u8d56\u4e0e\u5b89\u5168\u4fee\u590d\n\n**\u76ee\u7684**: \u5c06 `System.Security.Cryptography.Xml` \u4ece 8.0.3 \u56fa\u5b9a\u5347\u7ea7\u5230 8.0.4\uff0c\u4ee5\u91c7\u7528\u4e0a\u6e38\u5b89\u5168\u4fee\u590d\u5e76\u5904\u7406\u7ec4\u4ef6\u6cbb\u7406\u62a5\u544a\u7684\u591a\u4e2a\u9ad8\u5371\u6f0f\u6d1e\uff0c\u5305\u62ec CVE-2026-50525 \u548c CVE-2026-47304\uff1b\u4f7f\u7528\u4e2d\u592e\u5305\u7248\u672c\u7ba1\u7406\u53ef\u786e\u4fdd\u6240\u6709\u5f15\u7528\u8be5\u4f9d\u8d56\u7684\u9879\u76ee\u83b7\u5f97\u4e00\u81f4\u7248\u672c\uff0c\u907f\u514d\u5404\u9879\u76ee\u4fee\u590d\u72b6\u6001\u4e0d\u4e00\u81f4\u3002\n\n**\u6d89\u53ca\u6587\u4ef6**:\n- [Directory.Packages.props](https://dev.azure.com/msdata/A365/_git/Synapse-NotebookService/pullrequest/2264362?path=/Directory.Packages.props&_a=files) \u2014 \u5c06\u4ed3\u5e93\u7ea7 `System.Security.Cryptography.Xml` \u7248\u672c\u7531 8.0.3 \u66f4\u65b0\u4e3a 8.0.4\n\n**\u5173\u952e\u53d8\u66f4**:\n1. **\u5b89\u5168\u8865\u4e01\u5347\u7ea7**: \u7248\u672c\u4ec5\u63d0\u5347\u4e00\u4e2a\u8865\u4e01\u53f7\uff0c\u4e3b\u8981\u610f\u56fe\u662f\u5f15\u5165 .NET 8.0.4 \u5bf9 XML \u52a0\u5bc6\u7ec4\u4ef6\u7684\u5b89\u5168\u4fee\u590d\uff0c\u800c\u4e0d\u662f\u589e\u52a0 Notebook Service \u7684\u4e1a\u52a1\u529f\u80fd\u3002\n2. **\u96c6\u4e2d\u7248\u672c\u7edf\u4e00**: \u4fee\u6539\u4e2d\u592e\u5305\u7248\u672c\u6587\u4ef6\u540e\uff0c\u4ed3\u5e93\u5185\u6240\u6709\u91c7\u7528\u8be5\u96c6\u4e2d\u7248\u672c\u7684\u9879\u76ee\u4f1a\u7edf\u4e00\u89e3\u6790\u5230 8.0.4\uff0c\u56e0\u6b64\u4e00\u6b21\u4fee\u6539\u5373\u53ef\u8986\u76d6\u6240\u6709\u95f4\u63a5\u4f7f\u7528 XML \u7b7e\u540d\u3001\u52a0\u5bc6\u6216\u5bc6\u94a5\u5904\u7406\u80fd\u529b\u7684\u670d\u52a1\u3002\n3. **\u6700\u5c0f\u5316\u53d8\u66f4\u9762**: \u53ef\u89c1\u5dee\u5f02\u53ea\u66ff\u6362\u4f9d\u8d56\u7248\u672c\uff0c\u6ca1\u6709\u4e1a\u52a1\u903b\u8f91\u3001\u914d\u7f6e\u6d41\u7a0b\u6216\u516c\u5171\u63a5\u53e3\u8c03\u6574\uff0c\u6709\u5229\u4e8e\u5feb\u901f\u5408\u5165\u9ad8\u5371\u6f0f\u6d1e\u4fee\u590d\u5e76\u964d\u4f4e\u56de\u5f52\u8303\u56f4\u3002\n4. **\u8f93\u5165\u4fe1\u606f\u9650\u5236**: PR \u6458\u8981\u58f0\u660e\u5171\u53d8\u66f4 2 \u4e2a\u6587\u4ef6\uff0c\u4f46\u63d0\u4f9b\u7684\u6e90\u6587\u4ef6\u53ea\u5305\u542b `Directory.Packages.props` \u7684\u5dee\u5f02\uff1b\u7b2c\u4e8c\u4e2a\u6587\u4ef6\u7684\u8def\u5f84\u548c\u5185\u5bb9\u4e0d\u53ef\u89c1\uff0c\u56e0\u6b64\u65e0\u6cd5\u5bf9\u5176\u4f5c\u53ef\u9760\u7684\u9010\u6587\u4ef6\u8bf4\u660e\u3002\n\n[\u2191 \u8fd4\u56de\u76ee\u5f55](#\u76ee\u5f55)\n\n---\n\n## \u5f71\u54cd\u5206\u6790\n\n- **\u5f71\u54cd\u8303\u56f4**: \u76f4\u63a5\u5f71\u54cd\u4ed3\u5e93\u4e2d\u901a\u8fc7\u4e2d\u592e\u5305\u7248\u672c\u7ba1\u7406\u5f15\u7528 `System.Security.Cryptography.Xml` \u7684\u9879\u76ee\u53ca\u5176\u6784\u5efa\u4ea7\u7269\uff0c\u91cd\u70b9\u6d89\u53ca XML \u6570\u5b57\u7b7e\u540d\u3001XML \u52a0\u5bc6\u3001\u5bc6\u94a5\u89e3\u6790\u4e0e\u76f8\u5173\u5b89\u5168\u6821\u9a8c\u8def\u5f84\uff1bNotebook Service \u81ea\u8eab\u7684\u4e1a\u52a1\u63a5\u53e3\u548c\u4ea4\u4e92\u6d41\u7a0b\u6ca1\u6709\u53ef\u89c1\u6539\u52a8\u3002\n- **\u7528\u6237\u611f\u77e5**: \u6b63\u5e38\u60c5\u51b5\u4e0b\u7528\u6237\u4e0d\u4f1a\u770b\u5230\u529f\u80fd\u6216\u754c\u9762\u53d8\u5316\uff1b\u4e3b\u8981\u6536\u76ca\u662f\u540e\u53f0\u5b89\u5168\u6027\u589e\u5f3a\u3002\u82e5\u4e0a\u6e38\u8865\u4e01\u6536\u7d27\u4e86\u5bf9\u5f02\u5e38\u6216\u4e0d\u5b89\u5168 XML \u8f93\u5165\u7684\u6821\u9a8c\uff0c\u4f9d\u8d56\u65e7\u6709\u5bbd\u677e\u884c\u4e3a\u7684\u8fb9\u7f18\u8bf7\u6c42\u53ef\u80fd\u88ab\u62d2\u7edd\uff0c\u4f46\u8fd9\u901a\u5e38\u5c5e\u4e8e\u9884\u671f\u7684\u5b89\u5168\u884c\u4e3a\u53d8\u5316\u3002\n- **\u98ce\u9669\u70b9**:\n  1. **\u8865\u4e01\u7248\u672c\u517c\u5bb9\u6027**: \u5373\u4f7f\u662f 8.0.3 \u5230 8.0.4 \u7684\u8865\u4e01\u5347\u7ea7\uff0c\u5b89\u5168\u4fee\u590d\u4e5f\u53ef\u80fd\u8c03\u6574 XML \u7b7e\u540d\u9a8c\u8bc1\u3001\u7b97\u6cd5\u9009\u62e9\u6216\u8f93\u5165\u6821\u9a8c\u884c\u4e3a\uff1b\u5e94\u91cd\u70b9\u8986\u76d6\u73b0\u6709\u7b7e\u540d\u3001\u52a0\u5bc6\u3001\u89e3\u5bc6\u548c\u8bc1\u4e66\u517c\u5bb9\u573a\u666f\u3002\n  2. **\u5168\u4ed3\u5e93\u4f20\u64ad**: \u4e2d\u592e\u7248\u672c\u4fee\u6539\u4f1a\u540c\u65f6\u5f71\u54cd\u591a\u4e2a\u9879\u76ee\uff0c\u5b9e\u9645\u5f71\u54cd\u9762\u5927\u4e8e\u5355\u4e2a\u9879\u76ee\u6587\u4ef6\uff1b\u4efb\u4f55\u5bf9\u65e7\u7248\u672c\u884c\u4e3a\u7684\u9690\u5f0f\u4f9d\u8d56\u90fd\u53ef\u80fd\u5728\u8fd0\u884c\u65f6\u66b4\u9732\u3002\n  3. **\u4f9d\u8d56\u89e3\u6790\u4e00\u81f4\u6027**: \u5982\u679c\u90e8\u5206\u9879\u76ee\u5b58\u5728\u663e\u5f0f\u7248\u672c\u8986\u76d6\u3001\u9501\u6587\u4ef6\u6216\u4f20\u9012\u4f9d\u8d56\u7ea6\u675f\uff0c\u6700\u7ec8\u4ea7\u7269\u672a\u5fc5\u5168\u90e8\u89e3\u6790\u5230 8.0.4\uff0c\u9700\u8981\u786e\u8ba4\u6784\u5efa\u4f9d\u8d56\u56fe\u548c\u53d1\u5e03\u5305\u4e2d\u4e0d\u518d\u6b8b\u7559 8.0.3\u3002\n  4. **\u7f3a\u5931\u53d8\u66f4\u53ef\u89c1\u6027**: \u6e90\u6587\u4ef6\u58f0\u660e\u6709 2 \u4e2a\u53d8\u66f4\u6587\u4ef6\uff0c\u4f46\u53ea\u5c55\u793a\u5176\u4e2d 1 \u4e2a\uff1b\u672a\u5c55\u793a\u6587\u4ef6\u53ef\u80fd\u5305\u542b\u9501\u6587\u4ef6\u6216\u5176\u4ed6\u4f9d\u8d56\u5143\u6570\u636e\uff0c\u5176\u4e00\u81f4\u6027\u548c\u6f5c\u5728\u5f71\u54cd\u65e0\u6cd5\u4ece\u5f53\u524d\u6750\u6599\u786e\u8ba4\u3002\n  5. **\u786c\u7f16\u7801\u7248\u672c**: `8.0.4` \u662f\u4e2d\u592e\u4f9d\u8d56\u6e05\u5355\u4e2d\u7684\u663e\u5f0f\u56fa\u5b9a\u503c\uff0c\u8fd9\u662f\u53ef\u91cd\u590d\u6784\u5efa\u6240\u9700\u7684\u6709\u610f\u7248\u672c\u9501\u5b9a\uff0c\u800c\u975e\u4e1a\u52a1\u786c\u7f16\u7801\uff1b\u540e\u7eed\u4ecd\u9700\u4f9d\u8d56\u81ea\u52a8\u5316\u66f4\u65b0\u6301\u7eed\u63a5\u6536\u5b89\u5168\u8865\u4e01\u3002\n  6. **\u672a\u89c1\u989d\u5916\u9ad8\u98ce\u9669\u6a21\u5f0f**: \u53ef\u89c1\u5dee\u5f02\u4e2d\u6ca1\u6709\u8c03\u8bd5\u4ee3\u7801\u3001\u4e34\u65f6\u5f00\u5173\u3001\u4e0d\u7a33\u5b9a API \u8c03\u7528\u3001\u4e1a\u52a1\u5e38\u91cf\u786c\u7f16\u7801\u6216\u516c\u5171\u63a5\u53e3\u7834\u574f\u6027\u53d8\u66f4\uff1b\u4e3b\u8981\u98ce\u9669\u96c6\u4e2d\u5728\u7b2c\u4e09\u65b9\u5b89\u5168\u8865\u4e01\u7684\u884c\u4e3a\u517c\u5bb9\u6027\u3002\n", "creation_timestamp": "2026-08-23T00:08:57.414712Z"}, {"uuid": "c313e959-d50a-4e95-b301-b77abaf48aed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47255", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr4flmkaao2l", "content": "\ud83d\udfe0 CVE-2026-47255 - High (8.2)\n\nAgenticMail gives AI agents real email addresses and phone numbers. @agenticmail/api prior to ver...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47255/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-20T23:01:33.551094Z"}, {"uuid": "5baa9a93-5d25-4c32-91d6-df711430b357", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47255", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr4ilpwk632s", "content": "CVE-2026-47255 - AgenticMail API/storage and outbound relay hardening\nCVE ID : CVE-2026-47255\n \n Published : July 20, 2026, 10:17 p.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : AgenticMail gives AI agents real email addresses and phone numbers. @agenticmail/api prior to versio...", "creation_timestamp": "2026-07-20T23:55:18.001696Z"}, {"uuid": "7ad06c6c-c634-4a84-9c3a-95c14d710143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47995", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr4mm4po3u2v", "content": "\ud83d\udccc CVE-2026-47995 - Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious... https://www.cyberhub.blog/cves/CVE-2026-47995", "creation_timestamp": "2026-07-21T01:07:10.014405Z"}, {"uuid": "4fa19e6c-31fd-4ec6-85d7-488c473f5c63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47295", "type": "seen", "source": "https://bsky.app/profile/getpacketai.bsky.social/post/3mr5xswb3zq2o", "content": "Critical SQL injection flaw in Microsoft SQL Server (2016\u20132025) allows authenticated attackers to escalate privileges to\u2026\n\nhttps://dev.to/cverports/cve-2026-47295-cve-2026-47295-sql-injection-and-privilege-escalation-in-microsoft-sql-server-1l98\n\n#cybersecurity #infosec", "creation_timestamp": "2026-07-21T14:00:25.136956Z"}, {"uuid": "6e092ef4-69c1-4394-9a03-07fb14be92e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47296", "type": "seen", "source": "https://bsky.app/profile/getpacketai.bsky.social/post/3mr6362hyas2o", "content": "Critical SQL Server privilege escalation flaw lets authenticated users inject commands to reach sysadmin. Patch now if you're\u2026\n\nhttps://dev.to/cverports/cve-2026-47296-cve-2026-47296-elevation-of-privilege-via-sql-injection-in-microsoft-sql-server-24m5\n\n#cybersecurity #infosec", "creation_timestamp": "2026-07-21T15:00:20.976917Z"}, {"uuid": "b8d3df87-658f-4685-b61e-9a6d509b84de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4703", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117142233153816927", "content": "CVE-2026-4703: WS Form LITE \u22641.10.80 has a CRITICAL PHP Object Injection vuln via form meta deserialization. Exploitable if a POP chain exists in another plugin/theme \u2014 possible RCE, file deletion, or data leak. Audit plugins/themes. https://radar.offseq.com/threat/the-ws-form-lite-drag-drop-contact-form-builder-plugin-for-wordpress-is-vulnerable-to-php-object-f688cffee1daa479 #OffSeq #WordPress #CVE20264703", "creation_timestamp": "2026-08-23T01:30:26.742874Z"}, {"uuid": "f1876a9e-b2dd-4308-ad5f-6862808e5143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4703", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtpncccg4i27", "content": "PHP Object Injection in WS Form LITE \u22641.10.80 (CVE-2026-4703, CRITICAL). RCE possible if a POP chain is present in another plugin/theme. Audit your WordPress setup, remove risky components, and monitor for patches. https://radar.offseq.com/threat/the-ws-form-lite-drag-drop-contact-form-builder-pl...", "creation_timestamp": "2026-08-23T01:30:29.505710Z"}, {"uuid": "273e772c-ae0a-463b-bebf-0ae9094a9427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47895", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtpoiguhil2m", "content": "\u8106\u5f31\u6027: Apache Struts 2 \u306e Jakarta Multipart parser \u306b\u304a\u3051\u308b\u30d5\u30a1\u30a4\u30eb\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u306e\u4e0d\u5177\u5408\u3002  \u5f71\u97ff: \u653b\u6483\u8005\u304c\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u2026\nCVE-2026-47895 CVSS 7.5 | HIGH", "creation_timestamp": "2026-08-23T01:51:48.787914Z"}, {"uuid": "847803cd-4c68-45ee-81ad-722fbc75122e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47392", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr67xexkxl2i", "content": "CVE-2026-47392 - praisonai\nPraisonAI's execute_code function in subprocess sandbox mode can be bypassed, allowing attackers to execute arbitrary OS commands on the host. This is a critical\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #mervinpraison #pip #CVE #infosec", "creation_timestamp": "2026-07-21T16:26:05.196986Z"}, {"uuid": "92949bb7-8e6b-43c6-be5b-91a8ea51f74d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47393", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr67xg6sdj23", "content": "CVE-2026-47393 - praisonai\nPraisonAI's default API server is insecure because it doesn't require authentication. This means anyone can access the server's endpoints without a password. To fix\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #mervinpraison #pip #CVE #infosec", "creation_timestamp": "2026-07-21T16:26:06.097078Z"}, {"uuid": "b52b2dc5-8a65-4b51-8b0b-62cd1346a862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47396", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6axknrdb2a", "content": "CVE-2026-47396 - praisonai\nThe PraisonAI call server allows anyone to list, invoke, and delete agents if a special token is not set. This is a security risk because the server is exposed to the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #mervinpraison #pip #CVE #infosec", "creation_timestamp": "2026-07-21T16:44:04.570863Z"}, {"uuid": "46c6222c-71e4-48cb-a68c-2da827430dfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47391", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6axm7dk624", "content": "CVE-2026-47391 - praisonai\nThe PraisonAI official A2A example for their AI model allows an attacker to execute arbitrary code on the server without authentication. This can happen if the example is exposed to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #pip #CVE #infosec", "creation_timestamp": "2026-07-21T16:44:06.586562Z"}, {"uuid": "d7b9638f-2a18-4fa2-8e05-bb7fc6587cd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47407", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6dgceyy523", "content": "CVE-2026-47407 - praisonai-platform\nA security issue in the PraisonAI Platform allows unauthorized access to data across workspaces, enabling users to view, update, or delete resources\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonaiplatform #mervinpraison #pip #CVE #infosec", "creation_timestamp": "2026-07-21T17:28:06.696992Z"}, {"uuid": "38b91d90-fd73-499c-b7b3-5cd2195f285e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47410", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6djsm3uo2q", "content": "CVE-2026-47410 - praisonai-platform\nThe praisonai-platform uses a default secret key for signing JWTs, which can be easily obtained by an attacker. This allows them to create fake\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonaiplatform #mervinpraison #pip #CVE #infosec", "creation_timestamp": "2026-07-21T17:30:04.216248Z"}, {"uuid": "13a91786-f77c-48b2-a9fa-c2ac6c161423", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47413", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6grjt6ye23", "content": "CVE-2026-47413 - praisonai-platform\nA vulnerability in praisonai-platform allows any workspace member to add any user, including new or existing accounts, as the owner of the workspace. This means a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonaiplatform #pip #CVE #infosec", "creation_timestamp": "2026-07-21T18:28:04.820256Z"}, {"uuid": "006dfa23-d680-432c-9c72-3cd3cafe4fd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47416", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6grl2i6t2r", "content": "CVE-2026-47416 - praisonai-platform\nA security weakness in praisonai-platform allows any workspace member to promote themselves or others to owner. This means that someone with minimal access can gain\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonaiplatform #pip #CVE #infosec", "creation_timestamp": "2026-07-21T18:28:05.850276Z"}, {"uuid": "52f1407e-ed75-4161-ad18-c7502ebb3e88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47397", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6guka6je2e", "content": "CVE-2026-47397 - PraisonAI has an Arbitrary File Write in Python API\nCVE ID : CVE-2026-47397\n \n Published : July 21, 2026, 5:17 p.m. | 28\u00a0minutes ago\n \n Description : PraisonAI is a multi-agent teams system. Prior to version 4.6.40, hidden metadata in a webpage causes PraisonA...", "creation_timestamp": "2026-07-21T18:29:45.928759Z"}, {"uuid": "cb89c38e-83ef-45ab-937b-f9b772d15a4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47408", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6gy5caw624", "content": "CVE-2026-47408 - praisonai-platform: list_issue_activity returns activity log for any issue regardless of workspace ownership\nCVE ID : CVE-2026-47408\n \n Published : July 21, 2026, 5:17 p.m. | 28\u00a0minutes ago\n \n Description : PraisonAI Platform is the platform layer for the Prai...", "creation_timestamp": "2026-07-21T18:31:46.545744Z"}, {"uuid": "7f6cffe2-07de-4294-8f54-dcae7b99b85e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47399", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6h3ybzeo23", "content": "CVE-2026-47399 - PraisonAI Platform workspace-scoped routes allow cross-workspace object access by global object ID\nCVE ID : CVE-2026-47399\n \n Published : July 21, 2026, 5:17 p.m. | 28\u00a0minutes ago\n \n Description : PraisonAI Platform is the platform layer for the PraisonAI mult...", "creation_timestamp": "2026-07-21T18:33:55.517574Z"}, {"uuid": "e1af62e4-8b6c-4fc1-8424-e37bb9252ab0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47406", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6hjik73j2g", "content": "CVE-2026-47406 - praisonai-platform: Dependency endpoints accept any issue_id and dep_id without workspace ownership check, cross-workspace issue linking + read + delete IDOR\nCVE ID : CVE-2026-47406\n \n Published : July 21, 2026, 5:17 p.m. | 28\u00a0minutes ago\n \n Description : Prai...", "creation_timestamp": "2026-07-21T18:41:28.945004Z"}, {"uuid": "9e6eb02a-987c-46e7-b994-f20b4db70ecf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47409", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6houl2rk2q", "content": "CVE-2026-47409 - praisonai-platform: Any workspace member can remove any other member (including the owner) via DELETE /workspaces/{id}/members/{user_id}\nCVE ID : CVE-2026-47409\n \n Published : July 21, 2026, 5:17 p.m. | 28\u00a0minutes ago\n \n Description : PraisonAI Platform is the...", "creation_timestamp": "2026-07-21T18:44:28.983185Z"}, {"uuid": "ecf8e1d4-e53a-4ea7-89c7-2d06a51ad044", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47398", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6huto2mm2b", "content": "CVE-2026-47398 - PraisonAI: Arbitrary code execution via unguarded `spec.loader.exec_module` in `agents_generator.py` - sibling of CVE-2026-44334\nCVE ID : CVE-2026-47398\n \n Published : July 21, 2026, 5:17 p.m. | 28\u00a0minutes ago\n \n Description : PraisonAI is a multi-agent teams ...", "creation_timestamp": "2026-07-21T18:47:49.601890Z"}, {"uuid": "a3d12af0-72a2-41b3-be93-c1145792ded3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47407", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6iv5bttl2j", "content": "CVE-2026-47407 - PraisonAI Platform has a cross-workspace IDOR + member-role privilege escalation\nCVE ID : CVE-2026-47407\n \n Published : July 21, 2026, 5:17 p.m. | 28\u00a0minutes ago\n \n Description : PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams syst...", "creation_timestamp": "2026-07-21T19:05:53.478013Z"}, {"uuid": "2824e1e7-1669-4837-97a9-005752af48d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47410", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6j63qcax23", "content": "CVE-2026-47410 - praisonai-platform: JWT signing key defaults to hardcoded \"dev-secret-change-me\", allowing token forgery for any user when PLATFORM_ENV is unset\nCVE ID : CVE-2026-47410\n \n Published : July 21, 2026, 5:17 p.m. | 28\u00a0minutes ago\n \n Description : PraisonAI Platfor...", "creation_timestamp": "2026-07-21T19:10:53.869442Z"}, {"uuid": "bc19cc07-999a-408f-bad2-90ff9e194f4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47405", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6jpyp4ua2j", "content": "CVE-2026-47405 - PraisonAI Platform missing role checks let any workspace member become owner and take over workspace membership\nCVE ID : CVE-2026-47405\n \n Published : July 21, 2026, 5:17 p.m. | 28\u00a0minutes ago\n \n Description : PraisonAI Platform is the platform layer for the P...", "creation_timestamp": "2026-07-21T19:20:54.614312Z"}, {"uuid": "3383c5f7-89cf-43c5-95a1-07f5e4dbd276", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47419", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6kb7tahr2i", "content": "CVE-2026-47419 - praisonai-platform: Agent endpoints accept any agent_id without workspace ownership check, cross-workspace read/update/delete IDOR\nCVE ID : CVE-2026-47419\n \n Published : July 21, 2026, 6:17 p.m. | 19\u00a0minutes ago\n \n Description : PraisonAI Platform is the platf...", "creation_timestamp": "2026-07-21T19:30:32.594961Z"}, {"uuid": "f2bf33be-e7e5-4f37-9843-b999d2f831fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47412", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6kczhtvo2o", "content": "CVE-2026-47412 - praisonai-platform: Any workspace member can delete the entire workspace via DELETE /workspaces/{id}\nCVE ID : CVE-2026-47412\n \n Published : July 21, 2026, 6:16 p.m. | 19\u00a0minutes ago\n \n Description : PraisonAI Platform is the platform layer for the PraisonAI mu...", "creation_timestamp": "2026-07-21T19:31:32.779500Z"}, {"uuid": "c2de6b65-8ba0-49f4-89fe-0a551f770902", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47413", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6l2eo5mi22", "content": "CVE-2026-47413 - praisonai-platform: Any workspace member can add arbitrary user as owner via POST /workspaces/{id}/members\nCVE ID : CVE-2026-47413\n \n Published : July 21, 2026, 6:17 p.m. | 19\u00a0minutes ago\n \n Description : PraisonAI Platform is the platform layer for the Praiso...", "creation_timestamp": "2026-07-21T19:44:36.328203Z"}, {"uuid": "70c886f5-2e63-4993-a7f4-2144e56b912f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47418", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6ldd6txf27", "content": "CVE-2026-47418 - praisonai-platform: Project endpoints accept any project_id without workspace ownership check, cross-workspace read/update/delete IDOR\nCVE ID : CVE-2026-47418\n \n Published : July 21, 2026, 6:17 p.m. | 19\u00a0minutes ago\n \n Description : PraisonAI Platform is the p...", "creation_timestamp": "2026-07-21T19:49:36.648692Z"}, {"uuid": "30b60078-3abf-49e3-9124-3aedb0896a6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47417", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6lmboszb2j", "content": "CVE-2026-47417 - praisonai-platform: Comment endpoints accept any issue_id without workspace ownership check, cross-workspace comment read and post IDOR\nCVE ID : CVE-2026-47417\n \n Published : July 21, 2026, 6:17 p.m. | 19\u00a0minutes ago\n \n Description : PraisonAI Platform is the ...", "creation_timestamp": "2026-07-21T19:54:37.089340Z"}, {"uuid": "72ea33bf-7959-48ef-a238-8ac5b768fd7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47416", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6lvabput2s", "content": "CVE-2026-47416 - praisonai-platform: Any workspace member can promote themselves (or any other member) to owner via PATCH /workspaces/{id}/members/{user_id}\nCVE ID : CVE-2026-47416\n \n Published : July 21, 2026, 6:17 p.m. | 19\u00a0minutes ago\n \n Description : PraisonAI Platform is ...", "creation_timestamp": "2026-07-21T19:59:37.792545Z"}, {"uuid": "eb59d820-c454-46f4-92a1-545eddd60206", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47413", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr6lxqjrif2c", "content": "\ud83d\udd34 CVE-2026-47413 - Critical (9.6)\n\nPraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions pri...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47413/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-21T20:01:02.717862Z"}, {"uuid": "1d3b2239-97c8-491b-bf05-423cf6cefcd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47415", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6m675y5x2e", "content": "CVE-2026-47415 - praisonai-platform: Issue endpoints accept any issue_id without workspace ownership check, cross-workspace read/update/delete IDOR\nCVE ID : CVE-2026-47415\n \n Published : July 21, 2026, 6:17 p.m. | 19\u00a0minutes ago\n \n Description : PraisonAI Platform is the platf...", "creation_timestamp": "2026-07-21T20:04:38.597906Z"}, {"uuid": "a2564502-7939-4d6c-b137-c794ac7fcab3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47708", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6sj2vo3u2u", "content": "CVE-2026-47708 - stata-mcp\nThe Stata command wrapper for MCP-for-Stata is at risk of log file injection attacks. An attacker can inject malicious Stata commands by crafting a malicious log file name,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#statamcp #sepinetam #pip #CVE #infosec", "creation_timestamp": "2026-07-21T21:58:05.872377Z"}, {"uuid": "c80ba402-c232-463f-a66a-772170ea86de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47036", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6t2yu4ol2s", "content": "CVE-2026-47036 - siebel crm development\nVersions 17.0-26.3 of Oracle Siebel CRM's Approval Manager are at risk of takeover by unauthorized attackers who can access the system via the internet. This is a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T22:08:07.557140Z"}, {"uuid": "92a6c15f-b282-4e9c-a379-454b7b65b441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47040", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6t6j27mf2v", "content": "CVE-2026-47040 - oracle net services\nOracle Database Server versions 19.3-19.31, 21.3-21.22, and 23.4.0-23.26.2 have a security weakness that allows unauthorized access to sensitive information. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T22:10:05.339524Z"}, {"uuid": "00a0b7a7-bfc6-4aa3-9f89-562b447b1a33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47056", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6t6ksyuu2s", "content": "CVE-2026-47056 - oracle data integrator\nThe Oracle Data Integrator product in Oracle Fusion Middleware has a security flaw that allows hackers to take control of the system without a password. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T22:10:06.903987Z"}, {"uuid": "07d3c2a1-137d-4567-8ffa-3085c1a0e21b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47323", "type": "published-proof-of-concept", "source": "Telegram/_1aH9U5OrIpGhndKfVcAzFKVC5sR_AJ7SIBHQMpkCGSufcw", "content": "", "creation_timestamp": "2026-07-22T00:00:04.094462Z"}, {"uuid": "3d9d807b-39f6-490f-b475-01a1114e9c00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47851", "type": "seen", "source": "Telegram/7flft83Vjf6wLqlUx37f8i8JmZrWmYSQ64bCcsTKPPshTgs", "content": "", "creation_timestamp": "2026-08-27T16:00:04.132586Z"}, {"uuid": "9bc2f1a7-10b0-4192-b825-8ec1fc712f27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47834", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jbd5pt5664k36", "content": "CVE-2026-47834 - Spring Data JPA Sort expression validation bypass\nCVE ID : CVE-2026-47834\n \n Published : Aug. 26, 2026, 7:22 p.m. | 45\u00a0minutes ago\n \n Description : Spring Data JPA's Sort validation can be bypassed when parameters containing crafted payload are accepted from u...", "creation_timestamp": "2026-08-26T20:15:10.436389Z"}, {"uuid": "b2b3035e-3bd3-46b0-8a92-2348ac90f48a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4703", "type": "published-proof-of-concept", "source": "Telegram/6MOWzdsuBRUfSRyh2aRpTFk-sLxYOyyrOXiUm5uMNWePPGY", "content": "", "creation_timestamp": "2026-08-25T00:00:07.748199Z"}, {"uuid": "8648305a-1d49-47fd-b592-98dcb3b5b65c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47842", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/76s2cpigem3uh", "content": "CVE-2026-47842 - Deterministic AES/CBC Encryption in Spring Security AesBytesEncryptor Allows Ciphertext Correlation\nCVE ID : CVE-2026-47842\n \n Published : Aug. 26, 2026, 7:22 p.m. | 45\u00a0minutes ago\n \n Description : Applications using AesBytesEncryptor with the two-argument con...", "creation_timestamp": "2026-08-26T20:21:09.126613Z"}, {"uuid": "571d8e25-894e-49a5-98c5-1e7c18b9d60c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47630", "type": "published-proof-of-concept", "source": "Telegram/3uoG5wFLf24Ez4I576aLMwFbbZgYXdBfxkZjcO29_lRuMU0", "content": "", "creation_timestamp": "2026-08-25T00:00:07.170915Z"}, {"uuid": "bf06e49b-f095-4edc-9684-6b5b6afd3ae7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47843", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dubmui27xrh3j", "content": "CVE-2026-47843 - Reactor Netty may incorrectly route traffic due to DNS resolver reuse\nCVE ID : CVE-2026-47843\n \n Published : Aug. 26, 2026, 7:22 p.m. | 45\u00a0minutes ago\n \n Description : In specific scenarios involving multiple clients with different DNS resolver configurations,...", "creation_timestamp": "2026-08-26T20:27:09.195861Z"}, {"uuid": "7c5ed4ad-c5ea-4c6d-b845-41a8c7b899a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47844", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7aivwkjl6ma3u", "content": "CVE-2026-47844 - Reactor Netty HTTP Server Leaks Exception Details\nCVE ID : CVE-2026-47844\n \n Published : Aug. 26, 2026, 7:22 p.m. | 45\u00a0minutes ago\n \n Description : In specific scenarios, the Reactor Netty HTTP Server may leak exception details across unrelated requests. In or...", "creation_timestamp": "2026-08-26T20:33:09.196049Z"}, {"uuid": "45f3d208-a726-44e2-b808-c06ed9966e8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47848", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ix4llzkxcvlf5", "content": "CVE-2026-47848 - Reactor Netty WebSocket Client Leaks Credentials On Redirect\nCVE ID : CVE-2026-47848\n \n Published : Aug. 26, 2026, 7:22 p.m. | 45\u00a0minutes ago\n \n Description : In specific scenarios involving WebSocket handshake redirects to a different origin, the Reactor Nett...", "creation_timestamp": "2026-08-26T20:35:10.330588Z"}, {"uuid": "c7136e3d-7ad7-4758-974a-e4b6d5c06c1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47302", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mrabmuorzb25", "content": "\n\ud83d\udea8 New HIGH CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-47302 impacts Microsoft.NETCore.App.Runtime.linux-x64 in 4 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/631\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-07-22T12:01:19.184972Z"}, {"uuid": "bba324ae-91b2-444d-a90d-ef5a0a6386c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47423", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrabx7rhtk2s", "content": "\ud83d\udccc CVE-2026-47423 - DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. In 3.4.4, DOMPurify allowed selectedcontent by default, allowing bro... https://www.cyberhub.blog/cves/CVE-2026-47423", "creation_timestamp": "2026-07-22T12:07:06.366445Z"}, {"uuid": "be268c34-4470-4569-aa3a-d3a3e573be78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47731", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrammowolp2a", "content": "CVE-2026-47731 - ait-core\nAn attacker can access and modify files on a NASA AMMOS Instrument Toolkit server without a password, potentially leading to data corruption or exposure. This can happen if\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#aitcore #nasaammos #pip #CVE #infosec", "creation_timestamp": "2026-07-22T15:18:04.627002Z"}, {"uuid": "a0f7fc9f-48b5-4193-a0fa-402783bd038d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47056", "type": "seen", "source": "https://www.ncsc.nl/alerts/update-oracle-fusion-middleware-direct-vanwege-kritieke-kwetsbaarheden", "content": "", "creation_timestamp": "2026-07-22T16:15:08.846728Z"}, {"uuid": "df8e1725-7fa0-4fff-8bc9-211340ec1463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47300", "type": "seen", "source": "https://gist.github.com/alon710/89bf510277070903ffa845b8929ac197", "content": "# CVE-2026-47300: CVE-2026-47300: Elevation of Privilege in ASP.NET Core Negotiate Authentication Handler\n\n> **CVSS Score:** 8.8\n> **Published:** 2026-07-14\n> **Full Report:** https://cvereports.com/reports/CVE-2026-47300\n\n## Summary\nCVE-2026-47300 is a high-severity Elevation of Privilege (EoP) vulnerability in Microsoft's ASP.NET Core framework, affecting the Negotiate Authentication Handler when configured to retrieve security groups and role mappings via an LDAP/Active Directory directory service. In cross-platform Linux and macOS environments where native Windows token group expansion is unavailable, an authenticated attacker with low-privileged network access can manipulate LDAP query structures or force connections to untrusted directory resources, resulting in unauthorized administrative role assignment.\n\n## TL;DR\nAn input validation flaw in ASP.NET Core's LDAP-based Negotiate authentication allows low-privileged authenticated users to escalate privileges to administrator by injecting structural characters into LDAP queries or redirecting queries to rogue directory controllers.\n\n## Technical Details\n\n- **CWE ID**: CWE-303\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Base Score**: 8.8\n- **EPSS Score**: 0.00538 (42.03rd percentile)\n- **Impact**: Elevation of Privilege (EoP)\n- **Exploit Status**: None (No public PoCs)\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Microsoft .NET 8.0\n- Microsoft .NET 9.0\n- Microsoft .NET 10.0\n- Microsoft Visual Studio 2022\n- Microsoft Visual Studio 2026\n- **.NET 8.0**: 8.0.0 to < 8.0.29 (Fixed in: `8.0.29`)\n- **.NET 9.0**: 9.0.0 to < 9.0.18 (Fixed in: `9.0.18`)\n- **.NET 10.0**: 10.0.0 to < 10.0.6 (Fixed in: `10.0.6`)\n- **Visual Studio 2022 (v17.12)**: 17.12.0 to < 17.12.22 (Fixed in: `17.12.22`)\n- **Visual Studio 2022 (v17.14)**: 17.14.0 to < 17.14.36 (Fixed in: `17.14.36`)\n- **Visual Studio 2026 (v18.7)**: 18.0 to < 18.7.4 (Fixed in: `18.7.4`)\n\n## Mitigation\n\n- Apply framework patches immediately to updated SDK/Runtime versions.\n- Disable LDAP-based group membership resolution if alternative claims mapping mechanisms exist.\n- Restrict outgoing network traffic from application hosting environments to trusted domain controllers only.\n\n**Remediation Steps:**\n1. Upgrade the .NET Hosting Bundle, SDK, or Runtime on production and development hosts to 8.0.29, 9.0.18, or 10.0.6 as applicable.\n2. Recompile dependent applications to ensure the target framework resolution pulls the updated libraries.\n3. Configure network access controls to block outbound LDAP/LDAPS traffic to non-allowlisted systems.\n4. Monitor directory query logs for unexpected special character sequences in user identity queries.\n\n## References\n\n- [Microsoft Update Guide: CVE-2026-47300](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47300)\n- [CVE Record on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-47300)\n- [Wiz Vulnerability Database Listing](https://www.wiz.io/vulnerability-database/cve/cve-2026-47300)\n- [ASP.NET Core Repository](https://github.com/dotnet/aspnetcore)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-47300) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-22T16:31:38.270686Z"}, {"uuid": "9394c2fc-6333-4dcf-9192-890d82adc191", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47041", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrqzxkqk2j", "content": "\ud83d\udd17 CVE : CVE-2026-47041, CVE-2026-47043, CVE-2026-47044, CVE-2026-47047, CVE-2026-47050, CVE-2026-47053, CVE-2026-47054, CVE-2026-47055, CVE-2026-47062, CVE-2026-60150, CVE-2026-60155, CVE-2026-60158, CVE-2026-60159, CVE-2026-60160, CVE-2026-60161, CVE-2026-60162", "creation_timestamp": "2026-07-23T11:55:18.425517Z"}, {"uuid": "97d4d12f-8bdd-4fb9-bcd4-daf5d2e3c82f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47043", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrqzxkqk2j", "content": "\ud83d\udd17 CVE : CVE-2026-47041, CVE-2026-47043, CVE-2026-47044, CVE-2026-47047, CVE-2026-47050, CVE-2026-47053, CVE-2026-47054, CVE-2026-47055, CVE-2026-47062, CVE-2026-60150, CVE-2026-60155, CVE-2026-60158, CVE-2026-60159, CVE-2026-60160, CVE-2026-60161, CVE-2026-60162", "creation_timestamp": "2026-07-23T11:55:18.474988Z"}, {"uuid": "702b0fad-0ed3-4be1-a40c-d7c30b1b5b72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47044", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrqzxkqk2j", "content": "\ud83d\udd17 CVE : CVE-2026-47041, CVE-2026-47043, CVE-2026-47044, CVE-2026-47047, CVE-2026-47050, CVE-2026-47053, CVE-2026-47054, CVE-2026-47055, CVE-2026-47062, CVE-2026-60150, CVE-2026-60155, CVE-2026-60158, CVE-2026-60159, CVE-2026-60160, CVE-2026-60161, CVE-2026-60162", "creation_timestamp": "2026-07-23T11:55:18.534851Z"}, {"uuid": "ab0d1558-2f75-460e-8e66-945568b73155", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47047", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrqzxkqk2j", "content": "\ud83d\udd17 CVE : CVE-2026-47041, CVE-2026-47043, CVE-2026-47044, CVE-2026-47047, CVE-2026-47050, CVE-2026-47053, CVE-2026-47054, CVE-2026-47055, CVE-2026-47062, CVE-2026-60150, CVE-2026-60155, CVE-2026-60158, CVE-2026-60159, CVE-2026-60160, CVE-2026-60161, CVE-2026-60162", "creation_timestamp": "2026-07-23T11:55:18.592029Z"}, {"uuid": "6c87d2fc-99a4-4586-801a-16f4076c165b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47050", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrqzxkqk2j", "content": "\ud83d\udd17 CVE : CVE-2026-47041, CVE-2026-47043, CVE-2026-47044, CVE-2026-47047, CVE-2026-47050, CVE-2026-47053, CVE-2026-47054, CVE-2026-47055, CVE-2026-47062, CVE-2026-60150, CVE-2026-60155, CVE-2026-60158, CVE-2026-60159, CVE-2026-60160, CVE-2026-60161, CVE-2026-60162", "creation_timestamp": "2026-07-23T11:55:18.685708Z"}, {"uuid": "f745846b-8420-4cb7-bd75-4cdb7783ae37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47053", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrqzxkqk2j", "content": "\ud83d\udd17 CVE : CVE-2026-47041, CVE-2026-47043, CVE-2026-47044, CVE-2026-47047, CVE-2026-47050, CVE-2026-47053, CVE-2026-47054, CVE-2026-47055, CVE-2026-47062, CVE-2026-60150, CVE-2026-60155, CVE-2026-60158, CVE-2026-60159, CVE-2026-60160, CVE-2026-60161, CVE-2026-60162", "creation_timestamp": "2026-07-23T11:55:18.732434Z"}, {"uuid": "e81d63f8-cf48-4991-b8aa-30e4368ddb7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47054", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrqzxkqk2j", "content": "\ud83d\udd17 CVE : CVE-2026-47041, CVE-2026-47043, CVE-2026-47044, CVE-2026-47047, CVE-2026-47050, CVE-2026-47053, CVE-2026-47054, CVE-2026-47055, CVE-2026-47062, CVE-2026-60150, CVE-2026-60155, CVE-2026-60158, CVE-2026-60159, CVE-2026-60160, CVE-2026-60161, CVE-2026-60162", "creation_timestamp": "2026-07-23T11:55:18.783643Z"}, {"uuid": "ce199de0-2691-4f91-919f-72f137926c88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47055", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrqzxkqk2j", "content": "\ud83d\udd17 CVE : CVE-2026-47041, CVE-2026-47043, CVE-2026-47044, CVE-2026-47047, CVE-2026-47050, CVE-2026-47053, CVE-2026-47054, CVE-2026-47055, CVE-2026-47062, CVE-2026-60150, CVE-2026-60155, CVE-2026-60158, CVE-2026-60159, CVE-2026-60160, CVE-2026-60161, CVE-2026-60162", "creation_timestamp": "2026-07-23T11:55:18.838768Z"}, {"uuid": "736ad1fe-34b0-45b7-afe2-eff492ea53df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47062", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrqzxkqk2j", "content": "\ud83d\udd17 CVE : CVE-2026-47041, CVE-2026-47043, CVE-2026-47044, CVE-2026-47047, CVE-2026-47050, CVE-2026-47053, CVE-2026-47054, CVE-2026-47055, CVE-2026-47062, CVE-2026-60150, CVE-2026-60155, CVE-2026-60158, CVE-2026-60159, CVE-2026-60160, CVE-2026-60161, CVE-2026-60162", "creation_timestamp": "2026-07-23T11:55:18.887928Z"}, {"uuid": "26c0bc32-9db3-4f45-ac4b-0e656214db8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47004", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:45:54.735040Z"}, {"uuid": "ffa7e1d1-94cf-4f2e-8b7e-97a05c601906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47005", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:45:57.200442Z"}, {"uuid": "8bec0f7f-cfbe-48ce-8678-1ef1c957e0f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47006", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:45:59.601912Z"}, {"uuid": "31027cfd-be8f-4430-ab63-39444d0169fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47007", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:46:01.972129Z"}, {"uuid": "14f16fd3-87f6-44a6-97d0-1290a3dc8218", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47014", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:46:04.311849Z"}, {"uuid": "22eb6bad-6ec9-4958-ac97-c831a6ac3417", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47015", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:46:06.723457Z"}, {"uuid": "7255637d-902e-4f98-b7f9-ad0252d7a697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47017", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:46:09.069500Z"}, {"uuid": "12a66a39-86f6-426a-8be3-50ab00aa2b38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47018", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:46:11.387593Z"}, {"uuid": "f91a2866-ac4c-41c1-a7cd-5764981072f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47019", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:46:13.799169Z"}, {"uuid": "5276f06c-a585-493b-8222-232739318d2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47026", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:46:16.137009Z"}, {"uuid": "34d70558-de45-4330-83d3-3cfef3f31ead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47028", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:46:18.518164Z"}, {"uuid": "bd28720d-c8e8-4ef5-90df-ea716681aaa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47031", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:46:20.848807Z"}, {"uuid": "c381bd5d-0be7-44d3-8fca-52fbf34f9c80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47033", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:46:23.197489Z"}, {"uuid": "8373907b-655f-4071-aa68-4fa7670a8688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47036", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:46:25.750392Z"}, {"uuid": "c52a3119-dfc7-49fb-9872-e75aed0a128b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47037", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:46:28.098944Z"}, {"uuid": "263207da-f52d-4ec0-89f6-09c08b3539da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47040", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:46:30.500236Z"}, {"uuid": "b03a9465-3cc0-4a04-8336-08cf1bc9c043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47046", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:46:33.224277Z"}, {"uuid": "5a89f587-595a-4b73-adf6-5a2e4cd7bd8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47047", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:46:35.618757Z"}, {"uuid": "dd446739-46a5-48ea-bd2e-1abb7e6c4965", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47050", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:46:38.180657Z"}, {"uuid": "b7242ebd-57d8-4de5-8108-7727f22fb48d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47054", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:46:40.578632Z"}, {"uuid": "32f8074e-e604-4e02-9296-fca1c6b2b888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47056", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:46:42.932794Z"}, {"uuid": "56cfdacd-ea88-4826-b905-1b8203e694a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47057", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:46:45.276331Z"}, {"uuid": "f24e8d00-7294-4b8a-a2f8-3b497cebd733", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47058", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:46:47.603210Z"}, {"uuid": "3d81c9f1-f7f9-46f2-9eae-d93a113b1c89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47063", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:46:49.944815Z"}, {"uuid": "88459539-d70e-47d5-8a3d-f2a53a5b284b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47895", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtwzt4aum42x", "content": "HIGH severity CVE just published in strongSwan:\n\nCVE-2026-47895. In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-f\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-47895", "creation_timestamp": "2026-08-26T00:03:16.052243Z"}, {"uuid": "687b425f-827f-45f8-9d95-640504d5c185", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47752", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrdfoy3ttv2q", "content": "CVE-2026-47752 - tugtainer\nVersions of Tugtainer before 1.30.2 have a security flaw that allows any authorized user to run malicious commands on the system. This could lead to unauthorized changes or data\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#tugtainer #quenary #CVE #infosec", "creation_timestamp": "2026-07-23T17:52:04.109707Z"}, {"uuid": "a09796bd-8aa0-40d0-a91c-662bda15c405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47851", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99977", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a spring-ai-sibling-loop-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tangyaofq\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 13:53:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nMinimal reproduction for Spring AI ParagraphManager sibling self-loop OOM (incomplete fix of CVE-2026-47851)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-27T18:00:06.008751Z"}, {"uuid": "2a55e8af-512e-4854-9ec9-00f9088bb478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47668", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrdfw4wqi32r", "content": "CVE-2026-47668 - dbgate-serve\nDbGate's JSON script feature allows unauthorized access to run malicious code on a remote system. This could allow an attacker to take control of the system or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dbgateserve #GitHubActions #npm #CVE #infosec", "creation_timestamp": "2026-07-23T17:56:04.074718Z"}, {"uuid": "09593fdb-bbea-446c-bb42-77859185950c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47665", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtzk4r2zvc2r", "content": "\ud83d\udfe0 CVE-2026-47665 - High (8.7)\n\nPenpot is an open-source design and prototyping platform. In versions up to and including 2.14.3,...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47665/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T00:00:20.119766Z"}, {"uuid": "ffe65098-26e6-4728-b892-7a3333038d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47666", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtzk4xs4wc2r", "content": "\ud83d\udfe0 CVE-2026-47666 - High (7.6)\n\nPenpot is an open-source design and prototyping platform. In versions up to and including 2.14.3,...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47666/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T00:00:26.479951Z"}, {"uuid": "addd6fe4-7dbf-4c7c-b939-68fad897f783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47670", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrdmtx5jxr2y", "content": "CVE-2026-47670 - dbgate-api\nDbGate's load-reader endpoint is vulnerable to authenticated remote code execution attacks. An attacker with valid credentials can inject malicious code by\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dbgateapi #GitHubActions #npm #CVE #infosec", "creation_timestamp": "2026-07-23T20:00:07.073139Z"}, {"uuid": "70924164-c751-47bb-b2fe-7005e80da2a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47669", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrdmxhn4rv2q", "content": "CVE-2026-47669 - dbgate\nA bug in DbGate's ZIP file handling allows attackers to write files anywhere on the system. This is particularly concerning since DbGate runs with root privileges and issues\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dbgate #janprochazka #npm #CVE #infosec", "creation_timestamp": "2026-07-23T20:02:05.099672Z"}, {"uuid": "59c22367-8786-4282-8f38-a9c8d1260459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47724", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrdq3lhsox2k", "content": "CVE-2026-47724 - juev\nNon-admin operators can create admin API keys, giving them broad access to other tenants. This can happen when an API key is used to call the `/api/v1/operators//api-keys`\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#juev #Golang #CVE #infosec", "creation_timestamp": "2026-07-23T20:58:04.402068Z"}, {"uuid": "fb1fd7fd-bc2f-4497-b544-4e21f442f52e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47724", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdtlla4y72g", "content": "\ud83d\udd34 CVE-2026-47724 - Critical (9.9)\n\nnebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47724/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-23T22:00:42.831343Z"}, {"uuid": "f22f04b5-ef60-4730-98e9-51ef74185fb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47668", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mrezp6wm7r2w", "content": "\ud83d\udea8 A CVSS 10.0 vulnerability just dropped. That's as critical as it gets.\n\nDbGate.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-47668-dbgate-unauthenticated-rce-poc/\n\n#CVE #CyberSecurity", "creation_timestamp": "2026-07-24T09:22:46.483454Z"}, {"uuid": "60b8f976-b818-445c-9e20-db7cee42391c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47865", "type": "seen", "source": "https://bsky.app/profile/lasenal.bsky.social/post/3mrgo3vcul22w", "content": "VMware corrige un salto de autenticaci\u00f3n cr\u00edtico en Avi.\n\nDel 14 de julio, VMSA-2026-0005 corrige siete fallas en Avi Load Balancer. La peor, CVE-2026-47865 (9,8), deja entrar sin autenticarse al plano de control.\n\nLeer el aviso VMSA-2026-0005 \u2192\n\n#LaSe\u00f1alNews #Ciberseguridad #CyberSecurity", "creation_timestamp": "2026-07-25T01:00:27.080015Z"}, {"uuid": "4dd3f8ed-0dbd-4e59-b15f-7d6577fd48c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4703", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtqxpoala72o", "content": "CVE-2026-4703 - Critical PHP Object Injection in WS Form for WordPress leads to remote code execution via insecure deserialization. CVSS 9.8. Update now. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-4703/", "creation_timestamp": "2026-08-23T14:09:34.539285Z"}, {"uuid": "c5861695-1734-40b2-9f41-6f434d2687bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4703", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117145218203081604", "content": "CVE-2026-4703 - Critical PHP Object Injection in WS Form for WordPress leads to remote code execution via insecure deserialization. CVSS 9.8. Update now. #CVE #WordPress #infosec\nhttps://www.valtersit.com/cve/CVE-2026-4703/", "creation_timestamp": "2026-08-23T14:09:41.324655Z"}, {"uuid": "3d0d1df1-71d5-49da-be21-c60b875965cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47305", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrkw6iokeo25", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4: \u05e4\u05d2\u05d9\u05e2\u05d4 \u05e7\u05e9\u05d4 \u05d1-Visual Studio - CVE-2026-47305 \u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05d1\u05d9\u05e6\u05d5\u05e2 \u05e7\u05d5\u05d3 \u05de\u05e8\u05d5\u05d7\u05e7\n\n\n\nhttps://khesef.xyz/posts/8BBCFA4D-66A2-4A59-8276-CDB9716C8445", "creation_timestamp": "2026-07-26T17:35:42.629522Z"}, {"uuid": "9ab78c58-271e-4c9b-a7ba-4d6cb3896b02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47303", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrkw77sm3y2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 CVE-2026-47303 \u0432 ASP.NET Core: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/E1AD2BCD-6274-47C1-B6D3-15240F1C92F1", "creation_timestamp": "2026-07-26T17:36:07.084067Z"}, {"uuid": "33ed8c17-aac4-4180-8241-55ab466fa3ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47303", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrkwhb5byb2y", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05e7\u05e9\u05d4 \u05d1-ASP.NET Core: CVE-2026-47303 - \u05db\u05d9\u05e6\u05d3 \u05dc\u05d4\u05d2\u05df \u05e2\u05dc \u05de\u05e2\u05e8\u05db\u05d5\u05ea\u05d9\u05da\n\n\n\nhttps://khesef.xyz/posts/91346BA7-077E-4D3C-A282-3600AF18AC2D", "creation_timestamp": "2026-07-26T17:40:36.934565Z"}, {"uuid": "78c60901-19a7-4f69-b769-95d25d17860d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47851", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtzxmjlo5u26", "content": "\ud83d\udfe0 CVE-2026-47851 - High (7.5)\n\nAnalyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47851/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T04:01:51.145259Z"}, {"uuid": "bcbd35be-94a1-4e73-b67b-63d57da13edf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47852", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtzxmqk2v42t", "content": "\ud83d\udfe0 CVE-2026-47852 - High (7.5)\n\nA local attacker on a multi-user host can pre-create the deterministic cache path and plant a mal...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47852/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T04:01:54.552285Z"}, {"uuid": "a9c77724-5578-480e-aa92-c2d1b4bfad09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47895", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117145989503987243", "content": "A new vulnerability with increased severity was disclosed for strongSwan (CVE-2026-47895) https://vuldb.com/vuln/394517", "creation_timestamp": "2026-08-23T17:25:43.900748Z"}, {"uuid": "4ec2025e-b2f2-4004-84c5-1a761832800a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://t.me/zhatez/2764", "content": "Squidbleed (CVE-2026-47729): A 29-Year-Old Heap Over-Read Leaks Cleartext HTTP in Squid\n\nOriginal text: \u201cSquidbleed: A 29-Year-Old Heap Over-Read Leaks Cleartext HTTP in Squid (CVE-2026-47729)\u201d \u2014 Dark Web Informer (June 24, 2026). This is an independent technical write-up of the same vulnerability. The code samples below are original, illustrative reconstructions written for this article \u2014 they demonstrate the bug class and are not copied from the Squid\u2026\n\nhttps://core-jmp.org/2026/06/squidbleed-cve-2026-47729-squid-ftp-heap-over-read/", "creation_timestamp": "2026-07-26T07:01:46.183548Z"}, {"uuid": "0ad15247-992b-468c-a43f-e6bb45244f26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47767", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrktlovj4l2l", "content": "\u05ea\u05e7\u05dc\u05d4 \u05d7\u05de\u05d5\u05e8\u05d4 \u05d1\u05e1\u05d9\u05de\u05e4\u05d5\u05e0\u05d9: CVE-2026-47767 - \u05d3\u05e8\u05db\u05d9 \u05d4\u05ea\u05de\u05d5\u05d3\u05d3\u05d5\u05ea \u05d5\u05e4\u05e8\u05d8\u05d9\u05dd \u05d8\u05db\u05e0\u05d9\u05d9\u05dd\n\n\n\nhttps://khesef.xyz/posts/3388D158-82DA-4206-A24F-470970FC43ED", "creation_timestamp": "2026-07-26T16:49:24.148012Z"}, {"uuid": "ca08483f-517a-4fd5-9271-912fe796e668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47767", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrktlrje7q2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-47767 \u0432 Symfony: \u043e\u0431\u0445\u043e\u0434 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f CVE-2024-50340 \u0438 \u0443\u0433\u0440\u043e\u0437\u044b \u0434\u043b\u044f \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439\n\n\n\nhttps://kripta.biz/posts/5AA6EB2A-741A-4391-B507-3F2FAF6E5F22", "creation_timestamp": "2026-07-26T16:49:27.239097Z"}, {"uuid": "fc723733-47f6-4034-8fe6-f13823adacad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47302", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrktuvlrpl2m", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea CVE-2026-47302: \u05e1\u05d9\u05db\u05d5\u05df \u05d3\u05e0\u05d9\u05d0\u05dc \u05e9\u05dc \u05e9\u05d9\u05e8\u05d5\u05ea \u05d1-.NET \u05d5\u05de\u05d4 \u05e2\u05dc\u05d9\u05db\u05dd \u05dc\u05d3\u05e2\u05ea\n\n\n\nhttps://khesef.xyz/posts/52683E3E-2188-4EA6-8548-60053932ECFC", "creation_timestamp": "2026-07-26T16:54:33.347964Z"}, {"uuid": "9e1376f9-468a-4185-b6e9-cf75af5255de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47302", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrktuvp66u2j", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-47302 \u0432 .NET: \u0443\u0433\u0440\u043e\u0437\u0430 \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/0FA622B3-2FF5-4394-9EE8-878E326C2DDD", "creation_timestamp": "2026-07-26T16:54:33.847191Z"}, {"uuid": "a4d6e1e2-c664-4024-a8ea-e85348792ece", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47304", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrkubohowj2r", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-47304 \u0432 .NET: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/0EC878D4-8C9E-4C85-937D-9104DA109C45", "creation_timestamp": "2026-07-26T17:01:42.046875Z"}, {"uuid": "1770abd6-6e25-497f-8974-a4f73bf85448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47304", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrkukgv42b23", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4: \u05e4\u05d2\u05d9\u05e2\u05d4 \u05e7\u05e9\u05d4 \u05d1\u05de\u05e2\u05e8\u05db\u05ea .NET - CVE-2026-47304 - \u05db\u05d9\u05e6\u05d3 \u05dc\u05d4\u05d2\u05df \u05e2\u05dc \u05de\u05e2\u05e8\u05db\u05d5\u05ea\u05d9\u05da\n\n\n\nhttps://khesef.xyz/posts/E2401DAD-7A12-4E42-A8CF-0F31F2651F93", "creation_timestamp": "2026-07-26T17:06:36.370759Z"}, {"uuid": "816328d7-1b3c-495a-b03a-4fbcbe9074d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrkulfyj2t2p", "content": "\u05ea\u05e7\u05dc\u05d4 \u05e7\u05e9\u05d4 \u05d1\u05d7\u05dc\u05d5\u05e7\u05ea \u05d4\u05e8\u05e9\u05d0\u05d5\u05ea: CVE-2026-47301 \u05d1-Microsoft Configuration Manager\n\n\n\nhttps://khesef.xyz/posts/2E3410FA-5730-479F-BBF6-EE949E912EBB", "creation_timestamp": "2026-07-26T17:07:08.559003Z"}, {"uuid": "8bb8e6d7-13af-4061-851e-4a9f72999164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrkulfwwdo2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 CVE-2026-47301 \u0432 Microsoft Configuration Manager: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/A109AF0E-8C16-4690-9E4C-4AA424BD6435", "creation_timestamp": "2026-07-26T17:07:09.023561Z"}, {"uuid": "af690c30-c24a-42e0-bd85-5167449358f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47300", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrkumfjnie2z", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-47300 \u0432 ASP.NET Core: \u0443\u0433\u0440\u043e\u0437\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/72EFEB37-46C4-4D5E-9B89-6905E89A2F92", "creation_timestamp": "2026-07-26T17:07:41.947344Z"}, {"uuid": "3834a9a1-c615-4d64-8cba-867c9afb055e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47300", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrkun4ppqs2y", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4: \u05e4\u05d2\u05d9\u05e2\u05d4 \u05e7\u05e9\u05d4 \u05d1\u05d0\u05e1\u05e4.\u05e0\u05d8 \u05e7\u05d5\u05e8 - CVE-2026-47300 \u05d5\u05de\u05d4 \u05d6\u05d4 \u05d0\u05d5\u05de\u05e8 \u05dc\u05da\n\n\n\nhttps://khesef.xyz/posts/F615496B-14DF-47D8-AA9F-4C206EC3CDCE", "creation_timestamp": "2026-07-26T17:08:05.882229Z"}, {"uuid": "88c216f5-5fd6-4bf2-8063-5b466935c6aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47895", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtreyxdiay2i", "content": "CVE-2026-47895 - Double-Free vulnerability in strongSwan EAP identity parsing. CVSS 7.5. Update to version 6.0.7 immediately. #CVE #strongSwan #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-47895/", "creation_timestamp": "2026-08-23T18:07:24.569646Z"}, {"uuid": "95335bf3-d6df-4bb5-ab7a-34167dbedc96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47895", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117146153421135561", "content": "CVE-2026-47895 - Double-Free vulnerability in strongSwan EAP identity parsing. CVSS 7.5. Update to version 6.0.7 immediately. #CVE #strongSwan #infosec\nhttps://www.valtersit.com/cve/CVE-2026-47895/", "creation_timestamp": "2026-08-23T18:07:29.562572Z"}, {"uuid": "fa3fc22e-f1a5-4e3f-bed5-d893d2218fb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47305", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrkw6egjak2r", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-47305 \u0432 Visual Studio: \u0443\u0433\u0440\u043e\u0437\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430\n\n\n\nhttps://kripta.biz/posts/D862D2F5-925C-4161-98DF-DD9F2B92E6D8", "creation_timestamp": "2026-07-26T17:35:38.539947Z"}, {"uuid": "5d5d3897-8da3-4bea-92ff-7f2053296f6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://bsky.app/profile/lordman1982.bsky.social/post/3mtvheqwc7q2b", "content": "CVE-2026-47301: de una simple elevaci\u00f3n de privilegios en SCCM a ejecuci\u00f3n como SYSTEM\nwww.hackplayers.com/2026/08/cve-...", "creation_timestamp": "2026-08-25T09:00:27.366085Z"}, {"uuid": "b581b844-dc64-440b-b87c-3fcde2eedeff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47037", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrmbtqjcqk2m", "content": "\ud83d\udccc CVE-2026-47037 - Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).   The supported version that is aff... https://www.cyberhub.blog/cves/CVE-2026-47037", "creation_timestamp": "2026-07-27T06:37:06.603370Z"}, {"uuid": "c034d85c-c076-4c38-b443-9217f1783062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47004", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrmf6zhsz623", "content": "\ud83d\udccc CVE-2026-47004 - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Self Update Framework).  Supported versi... https://www.cyberhub.blog/cves/CVE-2026-47004", "creation_timestamp": "2026-07-27T07:37:06.699471Z"}, {"uuid": "d40b26ba-15ad-47f3-ac97-f24e848270ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47668", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mrmpphoxdg2o", "content": "\ud83d\udea8 A CVSS 10.0 vulnerability in a tool you might be using. No, that's not a typo.\n\nDbGate.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-47668-dbgate-unauthenticated-rce-poc/\n\n#InfoSec #DataBreach", "creation_timestamp": "2026-07-27T10:45:15.559728Z"}, {"uuid": "9b05f032-4e9f-4fcc-96d2-41d23402649b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47678", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrmw5a5zbw2x", "content": "\ud83d\udd17 CVE : CVE-2026-47678, CVE-2026-47679, CVE-2026-52848, CVE-2026-53610, CVE-2026-53625, CVE-2026-53629, CVE-2026-55214, CVE-2026-57152", "creation_timestamp": "2026-07-27T12:40:19.583642Z"}, {"uuid": "76904517-d233-4242-bad9-8943e84d0a06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47679", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrmw5a5zbw2x", "content": "\ud83d\udd17 CVE : CVE-2026-47678, CVE-2026-47679, CVE-2026-52848, CVE-2026-53610, CVE-2026-53625, CVE-2026-53629, CVE-2026-55214, CVE-2026-57152", "creation_timestamp": "2026-07-27T12:40:19.635295Z"}, {"uuid": "969db5be-d26c-49da-8050-5dd89c4b884a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47668", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mrp4fds2lh2j", "content": "CVSS 10.0 isn't a typo. This is the maximum score.\n\nDbGate database manager.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-47668-dbgate-unauthenticated-rce-poc/\n\n#CyberSecurity #Security", "creation_timestamp": "2026-07-28T09:37:33.911501Z"}, {"uuid": "153aa790-203f-45dc-b94b-220ba144044c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47056", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrod7uwrpj2i", "content": "\ud83d\udccc CVE-2026-47056 - Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Service).  Supported versions that are affected are 1... https://www.cyberhub.blog/cves/CVE-2026-47056", "creation_timestamp": "2026-07-28T02:07:07.338911Z"}, {"uuid": "f392da75-cd2f-4ac7-8035-f4c99df9a40d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47103", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98239", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-47103-python-statemachine-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SaiTeja-Erukude\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 21:29:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPython StateMachine 3.0.0 < 3.2.0 RCE via unsafe SCXML  evaluation and Python eval() injection.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-24T00:00:10.117829Z"}, {"uuid": "9b41a966-aa6c-4c38-95b6-46c621fb3646", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47117", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98231", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-47117-openmed-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SaiTeja-Erukude\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 20:27:30\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOpenMed < 1.5.2 unauthenticated RCE via PII privacy-filter model loading and trust_remote_code=True\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-24T00:00:10.235119Z"}, {"uuid": "aef1aa38-6fcd-42ce-84bc-5e4139211bd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47877", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7umnmveqqjybc", "content": "CVE-2026-47877 - Spring Security Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS)\nCVE ID : CVE-2026-47877\n \n Published : Aug. 27, 2026, 6:17 a.m. | 18\u00a0minutes ago\n \n Description : Spring Security Authorization Server's default consent page ...", "creation_timestamp": "2026-08-27T06:45:14.967400Z"}, {"uuid": "35556ae8-5cd3-48ef-bb0e-2f7cbf1df87a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47427", "type": "published-proof-of-concept", "source": "https://github.com/github/github-mcp-server/security/advisories/GHSA-w4q6-qw23-4rg7", "content": "", "creation_timestamp": "2026-07-28T16:35:07.437931Z"}, {"uuid": "36094835-f8a8-4cd8-9ed7-61c14bf4637e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47877", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu2bmprjhj2b", "content": "\ud83d\udfe0 CVE-2026-47877 - High (8.2)\n\nSpring Security Authorization Server's default consent page renders user-controlled values withou...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47877/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T07:00:51.144487Z"}, {"uuid": "37cc967c-e5b8-4ecc-a9ca-6358dece6081", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47879", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu2bmwobbt27", "content": "\ud83d\udfe0 CVE-2026-47879 - High (7.7)\n\nSpring Cloud Gateway JsonToGrpcGatewayFilterFactory allows arbitrary Spring Resource locations fo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47879/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T07:00:58.348002Z"}, {"uuid": "ec69adbf-a832-452b-82ea-8fc67f02a9e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47768", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrq4sk2xmp2a", "content": "CVE-2026-47768 - nebula-mesh: Newly-minted operator API key exposed in redirect URL (Referer, history, proxy logs)\nCVE ID : CVE-2026-47768\n \n Published : July 28, 2026, 6:19 p.m. | 20\u00a0minutes ago\n \n Description : nebula-mesh is a self-hosted control plane for Slack Nebula mesh...", "creation_timestamp": "2026-07-28T19:17:36.602174Z"}, {"uuid": "b7124b3e-8d0f-40d2-bbd2-41ca97797f46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "published-proof-of-concept", "source": "https://t.me/zhatez/2764", "content": "Squidbleed (CVE-2026-47729): A 29-Year-Old Heap Over-Read Leaks Cleartext HTTP in Squid\n\nOriginal text: \u201cSquidbleed: A 29-Year-Old Heap Over-Read Leaks Cleartext HTTP in Squid (CVE-2026-47729)\u201d \u2014 Dark Web Informer (June 24, 2026). This is an independent technical write-up of the same vulnerability. The code samples below are original, illustrative reconstructions written for this article \u2014 they demonstrate the bug class and are not copied from the Squid\u2026\n\nhttps://core-jmp.org/2026/06/squidbleed-cve-2026-47729-squid-ftp-heap-over-read/", "creation_timestamp": "2026-07-28T22:00:05.807582Z"}, {"uuid": "f7062535-9ca1-41b1-9f5c-fb78071624e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47427", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrqjw7fxsn2l", "content": "CVE-2026-47427 - Unauthenticated DoS in GitHub MCP Server before 1.1.0. Nil pointer dereference crashes server. CVSS 7.5. Update to 1.1.0 immediately. #CVE #GitHub #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-47427/", "creation_timestamp": "2026-07-28T23:12:18.337485Z"}, {"uuid": "3c1f5fe3-f4a2-4eb2-b8d8-ec2834c313cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47668", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mrrmxgah7k2n", "content": "CVSS 10.0 is the ceiling. DbGate just proved it can be worse.\n\nDbGate.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-47668-dbgate-unauthenticated-rce-poc/\n\n#CVE #CyberSecurity", "creation_timestamp": "2026-07-29T09:39:20.052626Z"}, {"uuid": "cf60395d-0d1a-4f6d-9177-85cc558ded82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47876", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrruttu6fz24", "content": "CRITICAL vulnerabilities in VMware ESXi, vCenter, Workstation & Fusion include VM escape (CVE-2026-47876) and RCE. No active exploitation, but patch now to secure your environment. https://radar.offseq.com/threat/critical-vm-escape-vulnerability-patched-in-vmware-esxi-7c609b015974b352 #OffSeq #VM...", "creation_timestamp": "2026-07-29T12:00:30.032302Z"}, {"uuid": "35d861cf-64fd-40bb-b410-e2110199da0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://t.me/hn_best_comments/29690", "content": "Re: Claude Wrote a Full FreeBSD Remote Kernel RCE with Root Shell (CVE-2026-4747)\n\nKey point is that Claude did not find the bug it exploits. It was given the CVE writeup[1] and was asked to write a program that could exploit the bug.\n\nThat said, given how things are I wouldn't be surprised if you could let Claude or similar have a go at the source code of the kernel or core services, armed with some VMs for the try-fail iteration, and get it pumping out CVEs.\n\nIf not now, then surely not in a too distant future.\n\n[1]: https://www.freebsd.org/security/advisories/FreeBSD-SA-26:08...\n\nmagicalhippo, 9 hours ago", "creation_timestamp": "2026-07-29T12:01:06.352949Z"}, {"uuid": "3622e886-c0d6-45a8-974c-3a140aa5739a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47876", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrrvmccwq72v", "content": "CVE-2026-47876: VMware's Critical VM Escape Patch Lacks Urgency #CVE2026 #VMware #CyberSecurity", "creation_timestamp": "2026-07-29T12:14:10.546481Z"}, {"uuid": "5cd20d4e-e9ed-41dd-9809-5f6d66eaa987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47876", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrrvmfc6sn2p", "content": "CVE-2026-47876: Is VMware's Critical VM Escape Vulnerability a Major Threat? #VMware #CyberSecurity #Vulnerability", "creation_timestamp": "2026-07-29T12:14:13.623018Z"}, {"uuid": "ab5c7fa8-d865-4b33-a8c8-59ffccadc665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47876", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mrrvs7gabc2d", "content": "Three of the vulnerabilities have been assigned a \u2018critical\u2019 severity rating. One of them is CVE-2026-47876, an out-of-bounds write issue in ESXi\u2019s VMXNET3 virtual network adapter. www.securityweek.com/critical-vm-...", "creation_timestamp": "2026-07-29T12:17:29.950289Z"}, {"uuid": "0647ddb4-6227-4e1d-9c28-15e371c84352", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47876", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrrvltod7t2w", "content": "CVE-2026-47876: VMware's Critical VM Escape Patch Is Not Enough #CVE202647876 #VMware #CyberSecurity", "creation_timestamp": "2026-07-29T12:13:55.845771Z"}, {"uuid": "04dbfe04-d244-42e0-861d-e912a36cda05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47876", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrrvlwqex62y", "content": "CVE-2026-47876: VMware ESXi's VM Escape Vulnerability Is a Major Risk #VMware #Cybersecurity #VMEscape", "creation_timestamp": "2026-07-29T12:13:58.563981Z"}, {"uuid": "46c18e9f-b113-4aab-959c-aaaeaef48b78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47876", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrrvm2fenj2y", "content": "CVE-2026-47876: VMware's Patch Doesn't Conceal the Escape Risk #CVE2026 #Cybersecurity #VMware", "creation_timestamp": "2026-07-29T12:14:03.052440Z"}, {"uuid": "5d3e883f-159e-402a-a472-9e6204569a60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47876", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrrvm7kgj22m", "content": "CVE-2026-47876: VMware's Critical VM Escape Vulnerability Must Be Taken Seriously #VMware #CyberSecurity #Vulnerability", "creation_timestamp": "2026-07-29T12:14:07.849322Z"}, {"uuid": "42904acd-3f63-4641-956c-b614731095d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47876", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0269", "content": "VMware heeft kwetsbaarheden verholpen in VMware vCenter en VMware ESX producten. VMware vCenter bevat een kritieke authentication-bypass kwetsbaarheid in de Directory Service met kenmerk CVE-2026-59309. Deze kwetsbaarheid stelt een kwaadwillende met netwerktoegang tot VMware vCenter in staat deze kwetsbaarheid te misbruiken om de authenticatie te omzeilen en ongeautoriseerde toegang tot het systeem te verkrijgen. \n\nDaarnaast bevat VMware vCenter ook een kritieke directory-traversal kwetsbaarheid in de Syslog server met kenmerk CVE-2026-59310. Deze kwetsbaarheid kan een kwaadwillende in staat stellen willekeurige code uit te voeren, waardoor mogelijk bestands- en directorypaden kunnen worden gemanipuleerd en toegang kan worden verkregen tot bestanden buiten de bedoelde Syslog-directory.\n\nVMware ESXi bevat een kritieke out-of-bounds write\u00a0kwetsbaarheid in de VMXNET3 virtuele netwerkadapter met kenmerk CVE-2026-47876. Deze kwetsbaarheid stelt een kwaadwillende met lokale beheerdersrechten op een virtuele machine met een VMXNET3 virtuele netwerkadapter in staat, code uit te voeren op de onderliggende host. Dit maakt het voor een kwaadwillende mogelijk, data buiten de bedoelde geheugenlimieten kan schrijven, wat kan leiden tot geheugenbeschadiging en onvoorspelbaar gedrag of compromittering van het virtuele systeem. Virtuele netwerkadapters die geen gebruikmaken van VMXNET3 zijn niet kwetsbaar. \n\nIn VMware ESX, Workstation en Fusion bevatten ook een out-of-bounds read kwetsbaarheid met kenmerk CVE-2026-41703. Misbruik van deze  kwetsbaarheid die kan resulteren in onbedoelde toegang tot geheugen buiten de toegewezen buffer, wat kan leiden tot informatielekken of systeeminstabiliteit binnen virtuele omgevingen. Daarnaast bevat VMware ESX een kwetsbaarheid met kenmerk CVE-2026-41709 door onvoldoende logging. Een kwaadwillende beheerder kan deze kwetsbaarheid misbruiken om bepaalde acties uit te voeren die niet in de logbestanden worden geregistreerd.\n\nHet is goed gebruik om toegang tot ESXi en vCenter uitsluitend beschikbaar te stellen vanuit een gescheiden beheeromgeving waarin alleen geautoriseerde beheerders toegang hebben. Deze beheerinterfaces dienen niet rechtstreeks vanaf internet of externe netwerken toegankelijk te zijn.", "creation_timestamp": "2026-07-29T13:00:55.257490Z"}, {"uuid": "9924c4ec-9a82-4c35-876c-3d8b2e13495a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47892", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu6535lcfv2t", "content": "CVE-2026-47892 - spring framework\nIf your application uses Spring's WebFlux with functional endpoints and the DispatcherServlet, an attacker could bypass header checks during a CORS pre\u2011flight\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#springframework #spring #CVE #infosec", "creation_timestamp": "2026-08-28T19:50:10.616469Z"}, {"uuid": "4631ec5d-bb50-45cf-b7aa-57e3caf30d94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47876", "type": "seen", "source": "https://t.me/HackerNewscyber/3302", "content": "\u2708\ufe0f \u0641\u0631\u0627\u0631 \u0627\u0632 \u0645\u0627\u0634\u06cc\u0646 \u0645\u062c\u0627\u0632\u06cc\u061b \u067e\u0646\u062c \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 VMware \u0648\u0635\u0644\u0647 \u0634\u062f\n\n\ud83c\udfa5\u0628\u0631\u0627\u062f\u06a9\u0627\u0645 \u067e\u0646\u062c \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0645\u062d\u0635\u0648\u0644\u0627\u062a ESXi\u060c vCenter\u060c Workstation \u0648 Fusion \u0631\u0627 \u0648\u0635\u0644\u0647 \u06a9\u0631\u062f \u06a9\u0647 \u0633\u0647 \u0645\u0648\u0631\u062f \u0627\u0632 \u0622\u0646\u200c\u0647\u0627 \u0628\u062d\u0631\u0627\u0646\u06cc \u0647\u0633\u062a\u0646\u062f.\n\n\ud83c\udfa4\u062e\u0637\u0631\u0646\u0627\u06a9\u200c\u062a\u0631\u06cc\u0646 \u0646\u0642\u0635\u060c CVE-2026-47876\u060c \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u06cc \u06a9\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u0631\u0648\u06cc \u06cc\u06a9 \u0645\u0627\u0634\u06cc\u0646 \u0645\u062c\u0627\u0632\u06cc \u062f\u0627\u0631\u062f \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0627\u0632 \u0622\u0646 \u0641\u0631\u0627\u0631 \u06a9\u0631\u062f\u0647 \u0648 \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0631\u0648\u06cc \u0633\u0631\u0648\u0631 \u0645\u06cc\u0632\u0628\u0627\u0646 \u0627\u062c\u0631\u0627 \u06a9\u0646\u062f. \u062f\u0648 \u0646\u0642\u0635 \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u06cc\u06af\u0631 \u062f\u0631 vCenter \u0642\u0631\u0627\u0631 \u062f\u0627\u0631\u0646\u062f: \u06cc\u06a9\u06cc \u0627\u0645\u06a9\u0627\u0646 \u062f\u0648\u0631 \u0632\u062f\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0648 \u062f\u06cc\u06af\u0631\u06cc \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0645\u0647\u0627\u062c\u0645 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n\ud83c\udfa4\u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u06a9\u0645\u200c\u062e\u0637\u0631\u062a\u0631 \u0646\u06cc\u0632 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0627\u0639\u062b \u0627\u0632 \u06a9\u0627\u0631 \u0627\u0641\u062a\u0627\u062f\u0646 \u0633\u0631\u0648\u06cc\u0633 \u06cc\u0627 \u0627\u0646\u062c\u0627\u0645 \u0641\u0639\u0627\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u0645\u062e\u0641\u06cc\u0627\u0646\u0647 \u0628\u062f\u0648\u0646 \u062b\u0628\u062a \u0644\u0627\u06af \u0634\u0648\u0646\u062f. \u0628\u0631\u0627\u062f\u06a9\u0627\u0645 \u0645\u06cc\u200c\u06af\u0648\u06cc\u062f \u062a\u0627\u06a9\u0646\u0648\u0646 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647\u200c\u0627\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0646\u0642\u0635\u200c\u0647\u0627 \u06af\u0632\u0627\u0631\u0634 \u0646\u0634\u062f\u0647\u060c \u0627\u0645\u0627 \u0628\u0627 \u062a\u0648\u062c\u0647 \u0628\u0647 \u0633\u0627\u0628\u0642\u0647 \u062d\u0645\u0644\u0627\u062a \u0628\u0647 VMware\u060c \u0646\u0635\u0628 \u0633\u0631\u06cc\u0639 \u0648\u0635\u0644\u0647\u200c\u0647\u0627 \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f.\n\n\u2708\ufe0f @HackerNewsCyber", "creation_timestamp": "2026-07-29T15:00:05.388128Z"}, {"uuid": "633f4653-0c5c-4059-95ad-bb88f88312a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47876", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-20", "content": "", "creation_timestamp": "2026-07-29T16:45:02.668032Z"}, {"uuid": "2a209d7f-4f6c-4dee-a6c8-4e73e0182679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47876", "type": "seen", "source": "https://www.ncsc.nl/alerts/kritieke-kwetsbaarheden-in-vmware-vcenter-en-esx-producten-update-onmiddellijk", "content": "", "creation_timestamp": "2026-07-29T16:45:10.285743Z"}, {"uuid": "f024fa81-f49a-4c29-a811-942297522e5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47876", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mrsfhckval2r", "content": "Broadcom patches critical VMware flaws, including a VM escape in ESXi (CVE-2026-47876) and unauthenticated RCE in vCenter (CVE-2026-59309, CVE-2026-59310). CVSS scores up to 9.8. Immediate patching is crucial. #VMware #CyberSecurity #PatchTuesday\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-29T16:57:43.457242Z"}, {"uuid": "aa4b4be0-6f77-4ca8-9731-996024f58459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47876", "type": "seen", "source": "https://t.me/true_secator/8455", "content": "Broadcom \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043d\u043e\u0432\u043e\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u0443\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 VMware \u043e \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0440\u044f\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 ESXi, vCenter, Workstation \u0438 Fusion.\n\n\u0422\u0440\u0435\u043c \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u00ab\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439\u00bb. \u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 - CVE-2026-47876, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u0432 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u043c \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u0430\u0434\u0430\u043f\u0442\u0435\u0440\u0435 VMXNET3 \u0432 ESXi.\u00a0\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043e\u0431\u043b\u0430\u0434\u0430\u044e\u0449\u0438\u0439 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043d\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u0441 \u044d\u0442\u0438\u043c \u0430\u0434\u0430\u043f\u0442\u0435\u0440\u043e\u043c, \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0445\u043e\u0441\u0442\u0435. VMware \u043e\u043f\u0438\u0441\u0430\u043b\u0430 CVE-2026-47876 \u043a\u0430\u043a \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u0445\u043e\u0434\u0430 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f CVE-2026-59309 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 vCenter, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCVE-2026-59310 \u0442\u0430\u043a\u0436\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e vCenter, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\u00a0\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, VMware ESXi, Workstation \u0438 Fusion \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b CVE-2026-41703, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043d\u0430 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438\u043b\u0438, \u0447\u0442\u043e \u0431\u043e\u043b\u0435\u0435 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c DoS.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2026-41709, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 ESXi, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f, \u043d\u0435 \u0431\u0443\u0434\u0443\u0447\u0438 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\u00a0\n\nBroadcom \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u043e \u0432\u0430\u0436\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u0438\u043b\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0447\u0430\u0441\u0442\u043e\u00a0\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u00a0\u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 VMware.\n\n\u0412 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a \u0441\u0432\u043e\u0435\u043c\u0443 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e, \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0440\u0430\u0437\u0434\u0435\u043b \u0432 FAQ, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u043a \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e.", "creation_timestamp": "2026-07-29T17:00:04.295387Z"}, {"uuid": "550452b8-ac14-4fda-91f4-b83995ca8abf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/48414", "content": "SCCM-CVE-2026-47301-Remote-Code-Execution\n\nExploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path traversal, certificate verification bypass, and DLL hijacking to achieve SYSTEM-level code execution.\n\nBlog: Microsoft Configuration Manager RCE 0-Day Exploit Chain (SCCM \ud835\uddd6\ud835\udde9\ud835\uddd8-\ud835\udfee\ud835\udfec\ud835\udfee\ud835\udff2-\ud835\udff0\ud835\udff3\ud835\udfef\ud835\udfec\ud835\udfed)", "creation_timestamp": "2026-09-02T06:00:05.513904Z"}, {"uuid": "0d77c402-f141-425d-8c81-538182094c31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47291", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/47007", "content": "\u00a1Alerta Cr\u00edtica! Microsoft Lanza Parches de Seguridad de Junio 2026 \ud83d\udea8\n\n\ud83d\udd39 Microsoft ha publicado su Patch Tuesday de junio 2026, con 206 vulnerabilidades, 32 de ellas cr\u00edticas.\n\ud83d\udd39 28 de estos fallos son de ejecuci\u00f3n remota de c\u00f3digo (RCE), afectando a Windows Active Directory, Office, Hyper-V y otros servicios esenciales.\n\ud83d\udd39 Cuatro RCE (CVE-2026-42985, CVE-2026-47291, CVE-2026-44803, CVE-2026-44812) son de \"explotaci\u00f3n m\u00e1s probable\", exigiendo actualizaci\u00f3n inmediata. Talos ha liberado reglas Snort para su detecci\u00f3n.\n\n\ud83d\udd17 https://blog.talosintelligence.com/microsoft-patch-tuesday-for-june-2026-snort-rules-and-prominent-vulnerabilities/", "creation_timestamp": "2026-09-02T06:00:07.407186Z"}, {"uuid": "8a803bce-d287-4bde-b552-6dbbc56fbd62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/44224", "content": "CVE-2026-4747\n*\nClaude Wrote a Full FreeBSD Remote Kernel RCE with Root Shell \n*\nexploit.py", "creation_timestamp": "2026-09-02T06:00:15.613743Z"}, {"uuid": "f963b786-a38c-4720-9f1e-53cc8eee0a67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://t.me/Russian_OSINT/6982", "content": "\ud83e\udd16\u0418\u0418 \u0432\u0437\u043b\u043e\u043c\u0430\u043b \u043e\u0434\u043d\u0443 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0445 \ud83c\udfa9\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0432 \u043c\u0438\u0440\u0435?\n\n\u041a\u0430\u043a \u043f\u0438\u0448\u0435\u0442 Forbes, \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 FreeBSD \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u0430\u0441\u0430\u044e\u0449\u0438\u0439\u0441\u044f CVE-2026-4747 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u044f\u0434\u0440\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0412 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u043b\u043e\u0441\u044c \u00ab\u041d\u0438\u043a\u043e\u043b\u0430\u0441\u0443 \u041a\u0430\u0440\u043b\u0438\u043d\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c Claude, Anthropic\u00bb. \u041e\u0431 \u044d\u0442\u043e\u043c \u0431\u044b\u043b \u043f\u043e\u0441\u0442 \u0442\u0443\u0442.\n\n\u0423\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0418\u0418-\u0430\u0433\u0435\u043d\u0442 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u0431\u043e\u0435\u0432\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (CVE-2026-4747) \u0432 \u044f\u0434\u0440\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b FreeBSD, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u0434\u043e\u0441\u0442\u0443\u043f \u0443\u0440\u043e\u0432\u043d\u044f \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f (root) \u0432\u0441\u0435\u0433\u043e \u0437\u0430 \u0447\u0435\u0442\u044b\u0440\u0435 \u0447\u0430\u0441\u0430 \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438. \u0418\u043c\u0435\u044f \u043b\u0438\u0448\u044c \u0431\u0430\u0437\u043e\u0432\u043e\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 RPCSEC_GSS, \u0418\u0418-\u0430\u0433\u0435\u043d\u0442 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u043b \u0442\u0435\u0441\u0442\u043e\u0432\u0443\u044e \u0441\u0440\u0435\u0434\u0443 \u0438 \u0440\u0435\u0448\u0438\u043b \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u043d\u0438\u0437\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u0445 \u0437\u0430\u0434\u0430\u0447. \u041e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043b \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0443 \u0448\u0435\u043b\u043b-\u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 (\u043e\u0431\u043e\u0439\u0434\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043e\u0431\u044a\u0435\u043c\u0430 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430), \u043e\u0442\u043b\u0430\u0434\u0438\u043b \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u0435 \u0441\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u0441\u0442\u0435\u043a\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0430\u0442\u0442\u0435\u0440\u043d\u043e\u0432 \u0434\u0435 \u0411\u0440\u0451\u0439\u043d\u0430, \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u043b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u043f\u043e\u0442\u043e\u043a\u0438 \u044f\u0434\u0440\u0430 \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043f\u0430\u0434\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0432\u044b\u0432\u0435\u043b \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0430 \u044f\u0434\u0440\u0430 \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0447\u0438\u0441\u0442\u0438\u0432 \u0443\u043d\u0430\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u044b \u043e\u0442\u043b\u0430\u0434\u043a\u0438.\n\n\u270b @Russian_OSINT", "creation_timestamp": "2026-09-02T06:00:18.129769Z"}, {"uuid": "97733a31-f0a8-466d-ba0b-93ca8f2b600c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/48414", "content": "SCCM-CVE-2026-47301-Remote-Code-Execution\n\nExploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path traversal, certificate verification bypass, and DLL hijacking to achieve SYSTEM-level code execution.\n\nBlog: Microsoft Configuration Manager RCE 0-Day Exploit Chain (SCCM \ud835\uddd6\ud835\udde9\ud835\uddd8-\ud835\udfee\ud835\udfec\ud835\udfee\ud835\udff2-\ud835\udff0\ud835\udff3\ud835\udfef\ud835\udfec\ud835\udfed)", "creation_timestamp": "2026-09-03T00:00:53.460206Z"}, {"uuid": "44f18ba1-b4cd-4d7e-8338-352dd1ef02bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "published-proof-of-concept", "source": "https://t.me/Russian_OSINT/6982", "content": "\ud83e\udd16\u0418\u0418 \u0432\u0437\u043b\u043e\u043c\u0430\u043b \u043e\u0434\u043d\u0443 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0445 \ud83c\udfa9\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0432 \u043c\u0438\u0440\u0435?\n\n\u041a\u0430\u043a \u043f\u0438\u0448\u0435\u0442 Forbes, \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 FreeBSD \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u0430\u0441\u0430\u044e\u0449\u0438\u0439\u0441\u044f CVE-2026-4747 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u044f\u0434\u0440\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0412 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u043b\u043e\u0441\u044c \u00ab\u041d\u0438\u043a\u043e\u043b\u0430\u0441\u0443 \u041a\u0430\u0440\u043b\u0438\u043d\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c Claude, Anthropic\u00bb. \u041e\u0431 \u044d\u0442\u043e\u043c \u0431\u044b\u043b \u043f\u043e\u0441\u0442 \u0442\u0443\u0442.\n\n\u0423\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0418\u0418-\u0430\u0433\u0435\u043d\u0442 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u0431\u043e\u0435\u0432\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (CVE-2026-4747) \u0432 \u044f\u0434\u0440\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b FreeBSD, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u0434\u043e\u0441\u0442\u0443\u043f \u0443\u0440\u043e\u0432\u043d\u044f \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f (root) \u0432\u0441\u0435\u0433\u043e \u0437\u0430 \u0447\u0435\u0442\u044b\u0440\u0435 \u0447\u0430\u0441\u0430 \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438. \u0418\u043c\u0435\u044f \u043b\u0438\u0448\u044c \u0431\u0430\u0437\u043e\u0432\u043e\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 RPCSEC_GSS, \u0418\u0418-\u0430\u0433\u0435\u043d\u0442 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u043b \u0442\u0435\u0441\u0442\u043e\u0432\u0443\u044e \u0441\u0440\u0435\u0434\u0443 \u0438 \u0440\u0435\u0448\u0438\u043b \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u043d\u0438\u0437\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u0445 \u0437\u0430\u0434\u0430\u0447. \u041e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043b \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0443 \u0448\u0435\u043b\u043b-\u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 (\u043e\u0431\u043e\u0439\u0434\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043e\u0431\u044a\u0435\u043c\u0430 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430), \u043e\u0442\u043b\u0430\u0434\u0438\u043b \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u0435 \u0441\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u0441\u0442\u0435\u043a\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0430\u0442\u0442\u0435\u0440\u043d\u043e\u0432 \u0434\u0435 \u0411\u0440\u0451\u0439\u043d\u0430, \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u043b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u043f\u043e\u0442\u043e\u043a\u0438 \u044f\u0434\u0440\u0430 \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043f\u0430\u0434\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0432\u044b\u0432\u0435\u043b \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0430 \u044f\u0434\u0440\u0430 \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0447\u0438\u0441\u0442\u0438\u0432 \u0443\u043d\u0430\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u044b \u043e\u0442\u043b\u0430\u0434\u043a\u0438.\n\n\u270b @Russian_OSINT", "creation_timestamp": "2026-09-03T00:00:44.563171Z"}, {"uuid": "274181aa-40d2-4913-98e7-147cb1aa7bab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/44224", "content": "CVE-2026-4747\n*\nClaude Wrote a Full FreeBSD Remote Kernel RCE with Root Shell \n*\nexploit.py", "creation_timestamp": "2026-09-03T00:00:47.133682Z"}, {"uuid": "17ab65bc-ab5a-4c47-8a03-279f4e19261a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47291", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/47007", "content": "\u00a1Alerta Cr\u00edtica! Microsoft Lanza Parches de Seguridad de Junio 2026 \ud83d\udea8\n\n\ud83d\udd39 Microsoft ha publicado su Patch Tuesday de junio 2026, con 206 vulnerabilidades, 32 de ellas cr\u00edticas.\n\ud83d\udd39 28 de estos fallos son de ejecuci\u00f3n remota de c\u00f3digo (RCE), afectando a Windows Active Directory, Office, Hyper-V y otros servicios esenciales.\n\ud83d\udd39 Cuatro RCE (CVE-2026-42985, CVE-2026-47291, CVE-2026-44803, CVE-2026-44812) son de \"explotaci\u00f3n m\u00e1s probable\", exigiendo actualizaci\u00f3n inmediata. Talos ha liberado reglas Snort para su detecci\u00f3n.\n\n\ud83d\udd17 https://blog.talosintelligence.com/microsoft-patch-tuesday-for-june-2026-snort-rules-and-prominent-vulnerabilities/", "creation_timestamp": "2026-09-03T00:00:51.972935Z"}, {"uuid": "9e0e6f3e-9d6f-4d5c-bb9c-e8e39143779b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47890", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muljiuamse23", "content": "\ud83d\udccc CVE-2026-47890 - Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events (SSE) with view fragments.\nSpring Framework 7.0.... https://www.cyberhub.blog/cves/CVE-2026-47890", "creation_timestamp": "2026-09-03T03:37:06.549198Z"}, {"uuid": "c4ed7f91-2a15-4591-b7c4-68f324d78dc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47891", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mull6jqveb2c", "content": "\ud83d\udccc CVE-2026-47891 - A Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the maxInMemorySize limit.\nSpring Fr... https://www.cyberhub.blog/cves/CVE-2026-47891", "creation_timestamp": "2026-09-03T04:07:07.505486Z"}, {"uuid": "f3023d7d-c396-405a-a9d4-b0767386162c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47877", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mun5htjswj23", "content": "\ud83d\udccc CVE-2026-47877 - Spring Security Authorization Server's default consent page renders user-controlled values without HTML entity encoding.\nSpring Security 7.1.0\nSpring ... https://www.cyberhub.blog/cves/CVE-2026-47877", "creation_timestamp": "2026-09-03T19:07:06.919944Z"}, {"uuid": "91b64760-e117-4b12-9005-be7edd2ee9b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4793", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mupxefajyk2b", "content": "Synology\u88fdNAS\u691c\u51fa\u30c4\u30fc\u30eb\u306eWindows\u7248\u306b\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u304c\u516c\u958b\n\nSynology\u306f\u3001\u540c\u793e\u88fdNAS\u3092\u691c\u51fa\u3057\u3001\u63a5\u7d9a\u3092\u30b5\u30dd\u30fc\u30c8\u3059\u308b\u300cSynology Assistant\u300d\u306eWindows\u7248\u306b\u8106\u5f31\u6027\u304c\u898b\u3064\u304b\u3063\u305f\u3068\u3057\u3066\u3001\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\n\n\u73fe\u5730\u6642\u95932026\u5e748\u67083\u65e5\u306b\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u3001\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u6642\u306b\u8a2d\u5b9a\u3055\u308c\u308b\u30c7\u30d5\u30a9\u30eb\u30c8\u306e\u30a2\u30af\u30bb\u30b9\u6a29\u9650\u306b\u8d77\u56e0\u3059\u308b\u8106\u5f31\u6027\u300cCVE-2026-4793\u300d\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\n\n\u653b\u6483\u306b\u306f\u30ed\u30fc\u30ab\u30eb\u74b0\u5883\u306b\u30a2\u30af\u30bb\u30b9\u3067\u304d\u3001\u4f4e\u6a29\u9650\u304c\u5fc5\u8981\u3068\u3055\u308c\u308b\u304c\u3001\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u51e6\u7406\u4e2d\u306b\u30ed\u30fc\u30ab\u30eb\u5229\u7528\u8005\u304c\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u3078\u30a2\u30af\u30bb\u30b9\u3057\u3066\u8aad\u307f\u53d6\u308a\u3084\u66f8\u304d\u8fbc\u307f\u3092\u884c\u3063\u305f\u308a\u3001\u30b5\u30fc\u30d3\u30b9\u62d2...", "creation_timestamp": "2026-09-04T21:55:48.466218Z"}, {"uuid": "2dec4ce2-d7d1-40f2-85bb-1ab68606a277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4747", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.page/post/3muqklvftj72y", "content": "Frontier labs warn of AI-driven attacks while gating offensive AI access. Anthropic's Mythos found a 27-year OpenBSD DoS and 17-year FreeBSD RCE (CVE-2026-4747); Mozilla saw 271 Firefox flaws. Most developers get restricted models that can't verify code, while attackers run unconstrained local ones.", "creation_timestamp": "2026-09-05T03:43:12.565654Z"}, {"uuid": "8087f652-3ec2-4337-8552-2585a55ed697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47172", "type": "seen", "source": "Telegram/rgUS2xfP1LazmiWNfolsR27C0veXqG1jSYUwYlao_Y9G7E0", "content": "", "creation_timestamp": "2026-09-07T22:00:04.425211Z"}, {"uuid": "7f2cd0d3-00b6-4369-83e6-a2217b3d3bb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47172", "type": "published-proof-of-concept", "source": "Telegram/rgUS2xfP1LazmiWNfolsR27C0veXqG1jSYUwYlao_Y9G7E0", "content": "", "creation_timestamp": "2026-09-08T00:00:10.079156Z"}, {"uuid": "f3eebbb2-ee5e-48b2-880b-607acd9bdacb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47291", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muxq3x5a6v2y", "content": "\ud83d\udccc Critical Windows HTTP.sys Vulnerability (CVE-2026-47291) Enables Unauthenticated Remote Code Executi... https://www.cyberhub.blog/article/28919-critical-windows-httpsys-vulnerability-cve-2026-47291-enables-unauthenticated-remote-code-execution", "creation_timestamp": "2026-09-08T00:07:06.584563Z"}, {"uuid": "3272ddcc-9214-48f2-a67d-7bdea1be4965", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47297", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0350", "content": "", "creation_timestamp": "2026-09-08T20:18:14.726732Z"}, {"uuid": "5e15844b-c931-46e0-9928-117af92bda2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47297", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review", "content": "Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there\u2019s a phrase from my military days that comes to mind: embrace the suck. Take an extend break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for September 2026\nFor the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for September 2026\n\n\n\n  \nAdobe Patches for September 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-146\n        Adobe Commerce\n        1\n        Critical\n        10.0\n        Yes\n        1\n      \n      \n        APSB26-142\n        Adobe Campaign Classic\n        1\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-119\n        Adobe ColdFusion\n        9\n        Critical\n        9.9\n        No\n        1\n      \n      \n        APSB26-98\n        Adobe Experience Manager\n        107\n        Critical\n        9.9\n        No\n        2\n      \n      \n        APSB26-138\n        Adobe Commerce\n        8\n        Critical\n        9.3\n        No\n        2\n      \n      \n        APSB26-141\n        Adobe Acrobat and Reader\n        32\n        Critical\n        8.8\n        No\n        2\n      \n      \n        APSB26-130\n        Adobe Photoshop\n        8\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-131\n        Adobe Illustrator\n        3\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-132\n        Adobe Animate\n        1\n        Critical\n        8.2\n        No\n        3\n      \n      \n        APSB26-136\n        Adobe Photoshop Mobile\n        2\n        Important\n        7.4\n        No\n        3\n      \n      \n        TOTAL\n        10 bulletins\n        172\n        \n        \n        \n        \n      \n    \n  \n  \nAPSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nClearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.\nBesides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for September 2026\nIt\u2019s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that\u2019s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.\nTo provide a little historical context on how many CVEs have been patched by Microsoft this year, let\u2019s take a look at some year-over-year totals:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nOn the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits \u2013 yet.  \nAs always, we\u2019ll start with the bugs under active attack and move on from there.  \n-              CVE-2026-81963 - Windows Update Stack Elevation of Privilege VulnerabilityThis is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.\n-              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityThis is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don\u2019t know how widespread these exploits may be, so assume they are coming for you and patch quickly.\n-              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution VulnerabilityThere are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail \u2013 no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.\n -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege VulnerabilityThis is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.\n-              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution VulnerabilityI count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn\u2019t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker\u2019s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.\n-              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege VulnerabilitySpeaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there\u2019s the user interaction component, but if they succeed, the attacker could gain access to the database at the user\u2019s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.\n-              CVE-2026-69525 - Remote Desktop Services Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an \u201cin-network attacker\u201d, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.\nSo where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):\n\n\nCVE-2026-69510 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-69524 \u2013 Windows Active Directory Domain Services Remote Code Execution Vulnerability\n\nCVE-2026-69530 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-69579 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\n\nCVE-2026-69590 \u2013 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability\n\nCVE-2026-69595 \u2013 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n\nCVE-2026-69730 \u2013 Windows DNS Server Remote Code Execution Vulnerability (SigRed\u2019s spiritual successor)\n\nCVE-2026-69858 \u2013 Windows DNS Server Remote Code Execution Vulnerability\n\nCVE-2026-72936 \u2013 Windows SMB Client Remote Code Execution Vulnerability\n\nCVE-2026-72979 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-72981 \u2013 IP Helper Remote Code Execution Vulnerability\n\nCVE-2026-72982 \u2013 Windows Netlogon Remote Code Execution Vulnerability\n\nCVE-2026-72983 \u2013 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability\n\nCVE-2026-72987 \u2013 Windows DNS Remote Code Execution Vulnerability\n\nCVE-2026-73009 \u2013 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n\nCVE-2026-73010 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78444 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78449 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-78450 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-83997 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\nHere\u2019s the full list of CVEs released by Microsoft for September 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-85880\n  Windows Advanced Local\n  Procedure Call (ALPC) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-81963\n  Windows Update Stack\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-70352 **\n  Azure AI Language\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-69857 **\n  Azure Cosmos DB\n  Spoofing Vulnerability\n  Critical\n  8.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80098 **\n  Copilot Studio\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-73006\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83941 **\n  Entra ID Elevation of\n  Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-72986\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73018\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73017\n  Graphics Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58599\n  HEVC Video Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72981\n  IP Helper Remote Code\n  Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72983\n  Internet Connection\n  Sharing (ICS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83711 **\n  Microsoft Azure Active\n  Directory B2C Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62906 **\n  Microsoft Discovery\n  Studio Information Disclosure Vulnerability\n  Critical\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65772\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62916 **\n  Microsoft Entra ID\n  Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-81948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81950\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81951\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81953\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81959\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70178 **\n  Microsoft Fabric\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-73010\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78444\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78439\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78520\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78509\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78519\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-78525\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69678\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69767\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69797\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69285\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69632\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-78505\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65669\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-67378\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67631\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67636\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67643\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70351\n  Microsoft WebP Image\n  Extension Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69601\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78510\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81952\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65818 **\n  Power Automate\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69649\n  Raw Image Extension\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66302\n  Skype for Business\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69854\n  Spring Cloud Azure\n  Elevation of Privilege Vulnerability\n  Critical\n  9\n  No\n  No\n  EoP\n \n \n  CVE-2026-81355\n  Virtual Hard Disk\n  (VHD) Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-81352\n  Web Media Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69874\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72958\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69845\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72979\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72987\n  Windows DNS Remote\n  Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69730\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69813\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69827\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69858\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-77505\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72954\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72957\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77493\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81955\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69769\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69710\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69725\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69740\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69784\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69799\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69820\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69864\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81354\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72980\n  Windows Hello Security\n  Feature Bypass Vulnerability\n  Critical\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72961\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69603\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80083\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69499\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69860\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70296\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73013\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73023\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77495\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69676\n  Windows Kerberos\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69712\n  Windows Key\n  Distribution Center Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70203\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72960\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69579\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72982\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70586\n  Windows Paint Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69530\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78449\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78450\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69518\n  Windows Remote Desktop\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69590\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69852\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72950\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72959\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69501\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69846\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69906\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-83939\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-73009\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69595\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70585\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-78445\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69829\n  Windows Shell Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72962\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69890\n  Windows Virtual\n  Trusted Platform Module Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-83498\n  Windows\n  Virtualization-Based Security (VBS) Enclave Elevation of Privilege\n  Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83501\n  Windows\n  Virtualization-Based Security (VBS) Information Disclosure Vulnerability\n  Critical\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69805\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69806\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58649\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69439\n  .NET and Visual Studio\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69522\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71328\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57099\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69304\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62810\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69821\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69395\n  Active Directory\n  Certificate Services (AD CS) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69624\n  Active Directory\n  Certificate Services (AD CS) Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69359\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72978\n  Active Directory\n  Federation Services (AD FS) Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69401\n  Audio Video Control\n  Transport Protocol Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62895\n  Azure Arc SQL Server\n  Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77909\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  7.7\n  No\n  No\n  Info\n \n \n  CVE-2026-81349\n  Azure HDInsight Ambari\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69329\n  BranchCache Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69516\n  Connected Devices\n  Platform Service (Cdpsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68824\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68847\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69470\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69625\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73014\n  Data Sharing Service\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73016\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81380\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-81381\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69576\n  Graphic Fonts\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81353\n  HEIF Image Extensions\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58600\n  HEVC Video Extensions\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69731\n  HID Class Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68895\n  Internet Storage Name\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69275\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69900\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68850\n  Microsoft Account\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68852\n  Microsoft Account\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-84003\n  Microsoft\n  Authentication Library (MSAL) for Node.js Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80097\n  Microsoft\n  Authenticator Elevation of Privilege Vulnerability\n  Important\n  8.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-83948\n  Microsoft Azure CLI\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69299\n  Microsoft COM for\n  Windows Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69294\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69491\n  Microsoft DirectMusic\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77908\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81387\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81390\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81391\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81392\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81393\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81394\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81395\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81399\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81400\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81401\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81958\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81386\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81388\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81389\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-81396\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81397\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81398\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81954\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81956\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81957\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81960\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69378\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69380\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69641\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69382\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-55007\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69355\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69356\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69361\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69375\n  Microsoft Exchange\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69467\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83990\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84000\n  Microsoft Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69605\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69325\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69438\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69277\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69365\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69594\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69477\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-69529\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69614\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69778\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72974\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78515\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-85875\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78518\n  Microsoft Office Excel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69626\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69739\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80076\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80078\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80082\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80087\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80089\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80091\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80073\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80084\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69629\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72938\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72956\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72975\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72977\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78513\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80086\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80081\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Important\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-69742\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81385\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69442\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78524\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69464\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69716\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69409\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69636\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69683\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69904\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  3.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69268\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69273\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69282\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69465\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69724\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69804\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69402\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69417\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69615\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  3.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69690\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64918\n  Microsoft Office\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-68843\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69719\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69734\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72976\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-77911\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78502\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78503\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78506\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78522\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80079\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80088\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80090\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83949\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83951\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69360\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69556\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69671\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69686\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69722\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69759\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69764\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72972\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72973\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77901\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78507\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78511\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78512\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78514\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78517\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78521\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78526\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80080\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80085\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69397\n  Microsoft OpenSSH for\n  Windows Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-77897\n  Microsoft Power\n  Automate Desktop Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62801\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57098\n  Microsoft Remote\n  Desktop App for Windows Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67376\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67633\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67641\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66814\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66818\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66819\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67368\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67370\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67381\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67369\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67383\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67386\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67389\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67390\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67393\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67624\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67629\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67630\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67645\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67648\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68776\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68777\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68778\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68779\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68780\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68781\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68784\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69562\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-73029\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77488\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47297\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-67373\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67379\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67380\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67384\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67385\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67388\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67638\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67639\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67642\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68775\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68785\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  4.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-68786\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68787\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77481\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77482\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77484\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77486\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66816\n  Microsoft SQL Server\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-68885\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68888\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68889\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68890\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68892\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68897\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69269\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69271\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69272\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69313\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69336\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68881\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68891\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69308\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69345\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69367\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69376\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69824\n  Microsoft Standard XPS\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72946\n  Microsoft Storage Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65812\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69559\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  5.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56198\n  Microsoft Trace Data\n  Helper Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69276\n  Microsoft UxTheme\n  Library (uxtheme.dll) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69420\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69427\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72933\n  Microsoft WDAC OLE DB\n  provider for SQL Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62706\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62744\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69386\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69408\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69511\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69586\n  Microsoft Windows PDF\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78451\n  Microsoft Windows SCSI\n  Class System File Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78452\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-78453\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68896\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69305\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69322\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69585\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69600\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69608\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69911\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69507\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70145\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69453\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69554\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69444\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69456\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69531\n  Microsoft Windows\n  Speech Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62804\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69807\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69303\n  Push Message Routing\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69819\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68828\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69358\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69485\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78463\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80074\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80077\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83998\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69292\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69338\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68893\n  Remote Desktop\n  Licensing Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69514\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69525\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69536\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69539\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69599\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69509\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69621\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72944\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66820\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73028\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77480\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77483\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77485\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77487\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78456\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66304\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66306\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63523\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66305\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69642\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69646\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66303\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66307\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66308\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69568\n  Storage Spaces\n  Controller Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69431\n  Telnet Client Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69384\n  Virtual Hard Disk\n  (VHD) Miniport Driver Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-69541\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69549\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69611\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69681\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70574\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81383\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-70334\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-78461\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-78462\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-81356\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81357\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81376\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  9.6\n  No\n  No\n  SFB\n \n \n  CVE-2026-81378\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81379\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81377\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77906\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77907\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69407\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69418\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69432\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72985\n  Volume Shadow Copy\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69609\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69808\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69832\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69853\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70290\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70565\n  Windows AF_UNIX Socket\n  Provider Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69834\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69654\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69816\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62762\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69809\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62813\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69524\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69546\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50349\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70342\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69311\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69394\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69447\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69540\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69604\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69692\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69801\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70562\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73005\n  Windows Authentication\n  Methods Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73004\n  Windows Autopilot\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-68825\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69293\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69298\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69323\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69352\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69476\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69580\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69583\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69589\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69593\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69727\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69738\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69773\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69787\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69826\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70572\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70573\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70581\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72941\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72990\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72991\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72992\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72993\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72994\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72995\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72996\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72997\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73000\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73001\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73002\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73007\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73011\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73015\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73020\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73021\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73026\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78447\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78448\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83954\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83955\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83967\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83968\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83969\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83970\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83971\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83972\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83973\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83974\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83975\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83976\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83977\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83978\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83979\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83980\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83981\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83982\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83983\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83985\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83986\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83987\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73008\n  Windows Biometric\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69458\n  Windows BitLocker\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69449\n  Windows BitLocker\n  Remote Code Execution Vulnerability\n  Important\n  6.7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69817\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68849\n  Windows Bluetooth Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69388\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69398\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69448\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69889\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77892\n  Windows Boot Manager\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69735\n  Windows Broadcast DVR\n  User Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69391\n  Windows Broker\n  Infrastructure Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69283\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69561\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78454\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78508\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69542\n  Windows Camera Frame\n  Server Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69279\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-80093\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83991\n  Windows Cloud Files\n  Mini Filter Driver Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69445\n  Windows Compressed\n  Folder Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70019\n  Windows Compressed\n  Folder Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69496\n  Windows Compressed\n  Folder Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69267\n  Windows Connected User\n  Experiences and Telemetry Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69771\n  Windows Container\n  Manager Service Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-70583\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70584\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70578\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69790\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69814\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69729\n  Windows Credential\n  Providers Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69284\n  Windows DCOM Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69781\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69777\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69342\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69405\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69416\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69497\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69637\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69679\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-70065\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77494\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77498\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77499\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77501\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77502\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77886\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77888\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77889\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77890\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77893\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77895\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69415\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69297\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69803\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69929\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69930\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-70124\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69266\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69412\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69510\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69547\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69620\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69847\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69876\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69878\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77887\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77891\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69631\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70091\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69310\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72948\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69369\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69672\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78523\n  Windows DNS Server\n  Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69551\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69782\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69989\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72928\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69680\n  Windows DNS Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69775\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70568\n  Windows Defender\n  Firewall Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68831\n  Windows Defender\n  Firewall Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69607\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72943\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69314\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69693\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69296\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69478\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69488\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69574\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69581\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69711\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69714\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69791\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69866\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77500\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83940\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69443\n  Windows Device Health\n  Attestation (DHA) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69472\n  Windows Devices Human\n  Interface Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69715\n  Windows Direct Show\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70567\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78446\n  Windows Distributed\n  File System (DFS) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-69424\n  Windows Distributed\n  File System (DFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69430\n  Windows Embedded Mode\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69688\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69841\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69794\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69481\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69907\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68894\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69362\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69433\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69436\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69450\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69462\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69513\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69612\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69896\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83996\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69684\n  Windows Error\n  Reporting Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69482\n  Windows Error\n  Reporting Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69493\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69494\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69495\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71338\n  Windows Failover\n  Cluster Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-72989\n  Windows Failover\n  Cluster Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68878\n  Windows Fast FAT\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69347\n  Windows Fast FAT\n  Driver Remote Code Execution Vulnerability\n  Important\n  7.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-68837\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71340\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72947\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77491\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68827\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69288\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69717\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69623\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69597\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69682\n  Windows Host Guardian\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69553\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69910\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69694\n  Windows IP Address\n  Management (IPAM) Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69341\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69500\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69613\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69483\n  Windows Image\n  Acquisition Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69318\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83992\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62694\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69441\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71339\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72929\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77894\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72926\n  Windows Internet\n  Connection Sharing (ICS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72964\n  Windows Internet\n  Connection Sharing (ICS) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69587\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69881\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69429\n  Windows Internet Key\n  Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69744\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69760\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69685\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69822\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68846\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68884\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69366\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69466\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69473\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69578\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83942\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-85360\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69406\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69723\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69669\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69421\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84001\n  Windows Key\n  Distribution Center Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69428\n  Windows LDAP -\n  Lightweight Directory Access Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69281\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69315\n  Windows License\n  Manager Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69732\n  Windows Link Layer\n  Topology Discovery Protocol Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69440\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69508\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69720\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78464\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68842\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69339\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69451\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70582\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77905\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69349\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-73012\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69891\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69645\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68887\n  Windows Message\n  Queuing Queue Manager Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72932\n  Windows Message\n  Queuing Queue Manager Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83997\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70579\n  Windows Mobile\n  Broadband Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69377\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69460\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70577\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73003\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73022\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69674\n  Windows Modern Device\n  Management (MDM) Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72963\n  Windows Modern\n  Execution Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69357\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69396\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-71334\n  Windows NFS Portmapper\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68832\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68834\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68838\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68841\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69265\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69312\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69332\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69340\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69379\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69505\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69532\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69567\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69875\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72935\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77503\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-83995\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68851\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69504\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69591\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-68833\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68875\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69463\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69479\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69566\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69638\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69709\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71329\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69425\n  Windows NTFS Tampering\n  Vulnerability\n  Important\n  4.7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62759\n  Windows Netlogon\n  Spoofing Vulnerability\n  Important\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-72967\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68886\n  Windows Network\n  Connection Broker Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69372\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69772\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69648\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78441\n  Windows OLE DB\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78442\n  Windows OLE DB Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69564\n  Windows Online\n  Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69350\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69368\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69371\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69373\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69316\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69343\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69474\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69480\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69492\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71341\n  Windows Partition\n  Management Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69324\n  Windows Performance\n  Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69459\n  Windows Power\n  Dependency Coordinator Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69321\n  Windows Power\n  Dependency Coordinator Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69569\n  Windows Print Spooler\n  Components Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-68835\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68848\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69309\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69346\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69364\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69838\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69921\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70564\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69344\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69552\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-85877\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69602\n  Windows\n  PrintWorkflowUserSvc Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68845\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68876\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69534\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69563\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68873\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68874\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-62697\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69280\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69300\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69548\n  Windows RNDIS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69768\n  Windows RNDIS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69337\n  Windows Registry\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69331\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69455\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71333\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71342\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71343\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71352\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72966\n  Windows Remote Access\n  Connection Manager Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77896\n  Windows Remote Desktop\n  Client Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69317\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69627\n  Windows Remote Desktop\n  Licensing Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70587\n  Windows Remote Desktop\n  Protocol Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69287\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69475\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-80096\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69616\n  Windows Remote Desktop\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83999\n  Windows Resilient File\n  System (ReFS) Deduplication Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69617\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83952\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72939\n  Windows Routing and\n  Remote Access Service (RRAS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-71351\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71353\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70570\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69544\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69572\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69618\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72936\n  Windows SMB Client\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69374\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69403\n  Windows SMB Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72949\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70575\n  Windows Schannel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-72940\n  Windows Schannel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69713\n  Windows Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72931\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Denial of Service Vulnerability\n  Important\n  4.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-71332\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72930\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-77899\n  Windows Security\n  Center Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78457\n  Windows Security\n  Health Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56177\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83989\n  Windows Services for\n  NFS ONCRPC XDR Driver Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-73024\n  Windows Services for\n  NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71330\n  Windows Services for\n  NFS ONCRPC XDR Driver Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69289\n  Windows Setup Files\n  Cleanup Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69383\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69392\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69528\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69606\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70563\n  Windows Shell Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69785\n  Windows Smart Card\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69512\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69535\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69643\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69691\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70569\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69390\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69393\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69741\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69770\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69895\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-72942\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69538\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71345\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71348\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71349\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71350\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72952\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69328\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78516\n  Windows Storage\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-69389\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71337\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69381\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-72937\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77492\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69290\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69575\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68844\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68877\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69588\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69385\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69404\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69757\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69761\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69793\n  Windows TCP/IP\n  Security Feature Bypass Vulnerability\n  Important\n  7.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72945\n  Windows Task Scheduler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69353\n  Windows Text Shaping\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69786\n  Windows Text Shaping\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69434\n  Windows URL Moniker\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73019\n  Windows URL Moniker\n  Security Feature Bypass Vulnerability\n  Important\n  4.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-69286\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69270\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69307\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69413\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69469\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-69571\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69687\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69707\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69859\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68840\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69295\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69503\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72953\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69457\n  Windows USB Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72999\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69490\n  Windows USB Mass\n  Storage Class Driver Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69527\n  Windows USB Mass\n  Storage Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68839\n  Windows USB Mass\n  Storage Class Driver Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69319\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69422\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69423\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69584\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69573\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69592\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69758\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68830\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69351\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56172\n  Windows VHD miniport\n  driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69426\n  Windows VOLSNAP.SYS\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69468\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69582\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77904\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69291\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69334\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69708\n  Windows Web Platform\n  Storage Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72965\n  Windows WebClient\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69792\n  Windows Win32K\n  Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-68880\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69274\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69301\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69333\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69335\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69348\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69410\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69498\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69610\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69630\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69652\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69689\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69706\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69762\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69779\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69818\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69844\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70283\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70289\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69517\n  Windows Wireless\n  Networking Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69862\n  Windows Wireless Wide\n  Area Network Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69560\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71336\n  Windows Work Folder\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80075\n  Windows Work Folders\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69619\n  Windows exFAT File\n  System Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68898\n  Windows iSCSI Denial\n  of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69598\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69628\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73025\n  Windows iSCSI Security\n  Feature Bypass Vulnerability\n  Important\n  9.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69839\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72927\n  Winsock Elevation of\n  Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58611\n  Xbox Gaming Services\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78455\n  Xbox Information\n  Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-84353 *\n  Chromium:\n  CVE-2026-84353 Use after free in Shared Tab Groups\n  Critical\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84324 *\n  Chromium:\n  CVE-2026-84324 Use after free in Proxy\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84325 *\n  Chromium:\n  CVE-2026-84325 Improper input validation in DataTransfer\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84326 *\n  Chromium:\n  CVE-2026-84326 Uninitialized resource in V8\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84359 *\n  Chromium:\n  CVE-2026-84359 Information leak in Skia\n  High\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84357 *\n  Chromium:\n  CVE-2026-84357 Improper input validation in Omnibox\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84349 *\n  Chromium:\n  CVE-2026-84349 Use after free in Browser\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84351 *\n  Chromium:\n  CVE-2026-84351 Buffer overflow in GPU\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84354 *\n  Chromium:\n  CVE-2026-84354 Incorrect authorization in FileSystem\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84323 *\n  Chromium:\n  CVE-2026-84323 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84328 *\n  Chromium:\n  CVE-2026-84328 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84332 *\n  Chromium:\n  CVE-2026-84332 Incorrect authorization in SiteSettings\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84334 *\n  Chromium:\n  CVE-2026-84334 Incorrect authorization in Chromoting\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84335 *\n  Chromium:\n  CVE-2026-84335 Incorrect authorization in TabStrip\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84347 *\n  Chromium:\n  CVE-2026-84347 Use after free in WebRTC\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84348 *\n  Chromium:\n  CVE-2026-84348 Information leak in MediaCapture\n  Medium\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84355 *\n  Chromium:\n  CVE-2026-84355 Incorrect authorization in Navigation\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84358 *\n  Chromium:\n  CVE-2026-84358 Improper privilege management in Downloads\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84327 *\n  Chromium:\n  CVE-2026-84327 Incorrect authorization in Autofill\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-84329 *\n  Chromium:\n  CVE-2026-84329 Confused deputy in CredentialProvider\n  Low\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84331 *\n  Chromium:\n  CVE-2026-84331 Incorrect authorization in Actor\n  Low\n  N/A\n  No\n  No\n  SFB\n \n \n  CVE-2026-84350 *\n  Chromium:\n  CVE-2026-84350 Use after free in TabStrip\n  Low\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84356 *\n  Chromium:\n  CVE-2026-84356 UI misrepresentation in FullScreen\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.\nThere are roughly 90+ Critical rated bug remaining, and I\u2019ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They\u2019ve already been patched by Microsoft, so there\u2019s no action for you. But don\u2019t ignore the EoP in Spring Cloud Azure. It\u2019s a complex scenario, but Microsoft still lists it as exploitation more likely. There\u2019s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?). \nFrom here on out, I\u2019ll try to break things down by component rather than severity rating or impact. It may make it easier. We\u2019ll see. \u00af\\_(\u30c4)_/\u00af\nWindows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn\u2019t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.\nWindows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads \u201celevate privileges over a network\u201d rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.\nWindows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.\nExchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.\nMicrosoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook\u2019s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word. \nSharePoint Server: This month\u2019s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above \u201cExploitation Less Likely\u201d, but given SharePoint's recent history of \u201cLess Likely\u201d becoming \u201cin the KEV catalog,\u201d the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.\nMicrosoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here\u2019s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378\u2019s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.\nWindows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server\u2019s record handling: another single-component sweep, but this one lands on domain controllers. We\u2019ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two \u201cMore Likely\u201d unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.\nWindows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague \u201cin-network attacker calling arbitrary endpoints\u201d phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where \u201crequires physical access\u201d describes every USB port in the building.\nThe USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic \u201cin-network attacker calling arbitrary endpoints\u201d boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.\nKerberos and the KDC: Six different bugs affect these components, but it\u2019s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC \u2014 two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. \u201cThe server\u201d here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them. \nExploitation More Likely: If you prioritize by Microsoft\u2019s Exploit Index (XI), which I don\u2019t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.\nThe Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-09-08T22:03:16.929750Z"}, {"uuid": "53cdaf13-9a12-496f-8762-7640c4b0215c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47297", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0350", "content": "Microsoft heeft 62 kwetsbaarheden verholpen in diverse componenten van SQL Server. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals benoemd in onderstaande tabel.\n\n```\nSQL Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47297 | 8,10 | Uitvoeren van willekeurige code     | \n| CVE-2026-66814 | 8,80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66816 | 6,50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-66818 | 8,80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66819 | 8,80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66820 | 8,80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-67368 | 8,80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-67369 | 6,50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-67370 | 8,80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-67373 | 8,80 | Uitvoeren van willekeurige code     | \n| CVE-2026-67376 | 7,50 | Denial-of-Service                   | \n| CVE-2026-67378 | 8,50 | Uitvoeren van willekeurige code     | \n| CVE-2026-67379 | 8,50 | Uitvoeren van willekeurige code     | \n| CVE-2026-67380 | 8,80 | Uitvoeren van willekeurige code     | \n| CVE-2026-67381 | 8,80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-67383 | 6,50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-67384 | 8,80 | Uitvoeren van willekeurige code     | \n| CVE-2026-67385 | 8,80 | Uitvoeren van willekeurige code     | \n| CVE-2026-67386 | 6,50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-67388 | 8,80 | Uitvoeren van willekeurige code     | \n| CVE-2026-67389 | 6,50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-67390 | 6,50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-67393 | 6,50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-67624 | 6,50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-67629 | 6,50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-67630 | 6,50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-67631 | 8,80 | Uitvoeren van willekeurige code     | \n| CVE-2026-67633 | 6,50 | Denial-of-Service                   | \n| CVE-2026-67636 | 8,50 | Uitvoeren van willekeurige code     | \n| CVE-2026-67638 | 8,80 | Uitvoeren van willekeurige code     | \n| CVE-2026-67639 | 8,80 | Uitvoeren van willekeurige code     | \n| CVE-2026-67641 | 6,50 | Denial-of-Service                   | \n| CVE-2026-67642 | 8,80 | Uitvoeren van willekeurige code     | \n| CVE-2026-67643 | 8,80 | Uitvoeren van willekeurige code     | \n| CVE-2026-67645 | 6,50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-67648 | 6,50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68775 | 8,80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68776 | 6,50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68777 | 6,50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68778 | 6,50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68779 | 6,50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68780 | 6,50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68781 | 6,50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68784 | 6,50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68785 | 4,90 | Uitvoeren van willekeurige code     | \n| CVE-2026-68786 | 8,80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68787 | 7,80 | Uitvoeren van willekeurige code     | \n| CVE-2026-69562 | 6,50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-73028 | 8,80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-73029 | 6,50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-77480 | 8,80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-77481 | 8,80 | Uitvoeren van willekeurige code     | \n| CVE-2026-77482 | 8,80 | Uitvoeren van willekeurige code     | \n| CVE-2026-77483 | 8,80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-77484 | 8,80 | Uitvoeren van willekeurige code     | \n| CVE-2026-77485 | 7,00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-77486 | 8,80 | Uitvoeren van willekeurige code     | \n| CVE-2026-77487 | 8,80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-77488 | 5,50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-78456 | 8,80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows OLE DB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-78441 | 6,50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-78442 | 8,80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-09-09T04:00:40.399761Z"}, {"uuid": "2e08429b-d533-4587-b561-569926fd62df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47297", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-24", "content": "", "creation_timestamp": "2026-09-09T08:51:42.577261Z"}, {"uuid": "1694ac1b-a03f-4245-bd40-a6b24c66009b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47875", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3mv6e5sbpxo23", "content": "A critical-severity fix just shipped for Broadcom Spring Batch. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-47875", "creation_timestamp": "2026-09-10T15:22:01.741656Z"}, {"uuid": "fc5626c4-8841-492b-a95e-06676be90a12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47884", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mv6f4sf3wa27", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-47884: Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an \"/**\" mapping that results i\u2026\nCVSS 9.8 \u00b7 EPSS 0.4%\nhttps://beta.vulnsea.com/cve/CVE-2026-47884\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-10T15:39:22.984559Z"}, {"uuid": "c62601fd-aa6e-4801-9ba0-2e76cbf8a5dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47839", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117251940382716886", "content": "Cloud Foundry UAA hit by CRITICAL vuln (CVE-2026-47839, CVSS 9.2): OIDC users with wildcard group mapping can gain uaa.admin. Review configs, avoid wildcards, and monitor for patches. https://radar.offseq.com/threat/cve-2026-47839-vulnerability-in-cloud-foundry-foundation-uaa-fe07e0d8fe092d86 #OffSeq #CloudSecurity #CVE202647839 #Infosec", "creation_timestamp": "2026-09-11T10:30:26.186466Z"}, {"uuid": "b3f6e407-e318-4d26-a2f3-675bdc9759fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47839", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvaede5jer2f", "content": "Cloud Foundry UAA faces a CRITICAL vuln (CVE-2026-47839, CVSS 9.2): OIDC users can escalate to uaa.admin via wildcard group mapping. Check configs & stay tuned for patches. https://radar.offseq.com/threat/cve-2026-47839-vulnerability-in-cloud-foundry-foundation-uaa-fe07e0d8fe092d86 #OffSeq #Cloud...", "creation_timestamp": "2026-09-11T10:30:28.901543Z"}, {"uuid": "e17cfc77-d9a6-46e6-90e5-a12006542d65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47839", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvagkeljaz2y", "content": "CVE-2026-47839 - uaa\nIn Cloud Foundry UAA (and deployments using cf-deployment), a misconfiguration lets users who sign in through an external OpenID Connect provider obtain the admin scope even when the provider is\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#uaa #CVE #infosec", "creation_timestamp": "2026-09-11T11:10:11.295658Z"}, {"uuid": "fd15e599-3c92-4a12-bf9a-eff95fca39f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47839", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/haaenqkc7v32z", "content": "CVE-2026-47839 - Federated OIDC Users Can Bypass externalGroupsWhitelist to Gain uaa.admin\nCVE ID : CVE-2026-47839\n \n Published : Sept. 11, 2026, 10:16 a.m. | 39\u00a0minutes ago\n \n Description : A vulnerability allows users authenticating through a federated OIDC provider to obtai...", "creation_timestamp": "2026-09-11T11:39:57.907877Z"}, {"uuid": "460721a5-bb4f-4a8b-8f4f-8b0162b34781", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47839", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvajqyyupa2p", "content": "\ud83d\udea8 CVE-2026-47839 \u2014 CVSS 9.2 CRITICAL\n\nA vulnerability allows users authenticating through a federated OIDC provider to obtain the uaa.admin scope...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-47839\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-11T12:07:34.373105Z"}, {"uuid": "a15079fe-8909-42c3-aa9e-b8fa0b4cb4c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47864", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3mvaxp2ppxc2r", "content": "A critical-severity fix just shipped for Vmware Spring Integration. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-47864", "creation_timestamp": "2026-09-11T16:17:01.728454Z"}, {"uuid": "9bf41418-8eed-42d4-86ce-d8c075e3c552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47837", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3mveil43mkq2i", "content": "A critical-severity fix just shipped for Vmware Spring Cloud Config. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-47837", "creation_timestamp": "2026-09-13T01:57:01.639147Z"}, {"uuid": "5257c6d3-33dc-49fb-ba21-3653cc68f4a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47424", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmd3iz53c22", "content": "CVE-2026-47424 - org.openidentityplatform.openam:openam-scripting\nVersions of OpenAM before 16.1.1 let a user who can create or edit scripts bypass the built\u2011in safety checks and execute commands\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openidentityplatform #Java #CVE #infosec", "creation_timestamp": "2026-09-16T04:40:07.365208Z"}, {"uuid": "c7cb1f0e-a2d3-4b8a-867e-2c479990a515", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47252", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvqfbs2y542n", "content": "CVE-2026-47252 - julien040\nIf you use Anyquery's plugins for Chrome, Brave, Edge or Safari on macOS, a specially crafted web address can break out of the script and run arbitrary commands on the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#julien040 #anyquery #Golang #CVE #infosec", "creation_timestamp": "2026-09-17T19:30:04.783047Z"}, {"uuid": "66f39ae9-e05d-4b49-ac1d-6f6585fb3b55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47627", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvw5osvoz226", "content": "\u300cNVIDIA Triton Inference Server\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u3092\u516c\u958b\n\nNVIDIA\u306f\u73fe\u5730\u6642\u95932026\u5e748\u670818\u65e5\u3001\u300cNVIDIA Triton Inference Server\u300d\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u305f\u3002\u6df1\u523b\u306a\u8106\u5f31\u6027\u3092\u89e3\u6d88\u3057\u305f\u3068\u3057\u3066\u3044\u308b\u3002\n\n\u540c\u88fd\u54c1\u306f\u3001AI\u3084\u6a5f\u68b0\u5b66\u7fd2\u30e2\u30c7\u30eb\u3092\u5229\u7528\u3059\u308b\u30b7\u30b9\u30c6\u30e0\u306b\u304a\u3044\u3066\u3001\u63a8\u8ad6\u51e6\u7406\u3092\u5b9f\u884c\u3059\u308b\u57fa\u76e4\u3068\u3057\u3066\u7528\u3044\u3089\u308c\u308b\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u3002Linux\u7248\u306e\u300c\u540c26.05\u300d\u304a\u3088\u3073\u4ee5\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306b5\u4ef6\u306e\u8106\u5f31\u6027\u304c\u78ba\u8a8d\u3055\u308c...\n\n\u4eca\u56de\u5224\u660e\u3057\u305f\u8106\u5f31\u6027\u306b\u304a\u3044\u3066\u3001\u3082\u3063\u3068\u3082\u5f71\u97ff\u304c\u5927\u304d\u3044\u3068\u3055\u308c\u308b\u306e\u304c\u3001\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u306e\u8106\u5f31\u6027\u300cCVE-2026-47627\u300d\u3002", "creation_timestamp": "2026-09-20T02:30:11.275634Z"}, {"uuid": "65c38da4-2cab-4144-8ce1-77882c5fad2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47065", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117309819472613244", "content": "sev:CRIT bypass of CVE-2026-47065 in Apache MINA.\nhttps://nvd.nist.gov/vuln/detail/cve-2026-94301\n\nThe fix for CVE-2026-47065/ZDRES-232 (\"resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect.Proxy\"), released on 2026-06-02 and announced as \"Fully addressed\" in MINA 2.2.8, 2.1.13 and 2.0.29, was committed to the  2.2.X branch only. The 2.0.X and 2.1.X maintenance branches never received the resolveProxyClass() override, so the 2.0.29 and 2.1.13 artifacts listed as fixed -- and every later release on those lines, up to and including the current 2.0.30 and 2.1.14 -- remain vulnerable to the exact allow-list bypass that CVE-2026-47065 was meant to close.", "creation_timestamp": "2026-09-21T15:49:52.175870Z"}, {"uuid": "05e1add5-8c00-443f-80f7-4b8d2dbfedb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47065", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw23szyqif24", "content": "\ud83d\udea8 CVE-2026-94301 \u2014 CVSS 9.8 CRITICAL\n\nThe fix for CVE-2026-47065/ZDRES-232 (\"resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-94301\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-21T16:07:23.577355Z"}, {"uuid": "b0b6445a-420c-410f-a2f6-a6ee2ba7e63f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47691", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw4x2lpu5p2g", "content": "CVE-2026-47691 - netty\nThe Netty DNS resolver library used in Java applications can be exploited to run unauthorized code on a server. This could let attackers take control of the affected system. Apply the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#netty #Java #CVE #infosec", "creation_timestamp": "2026-09-22T19:20:07.179773Z"}, {"uuid": "3b60bd22-40ea-4cb7-9a71-9300082e60f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47116", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/aw5ny7jgkeoge", "content": "CVE-2026-47116 - LTSecurity LTK3500SF Hard-coded Credentials via Telnet/SSH\nCVE ID : CVE-2026-47116\n \n Published : Sept. 22, 2026, 7:19 p.m. | 39\u00a0minutes ago\n \n Description : LTSecurity LTK3500SF contains a hard-coded credentials vulnerability where root and guest account pass...", "creation_timestamp": "2026-09-22T20:46:52.761093Z"}, {"uuid": "55a3c357-67ba-4ad9-8fbc-0428109fc42d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47116", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw56utr4dq24", "content": "CVE-2026-47116 - ltk3500sf\nThe LTSecurity LTK3500SF device stores its root and guest passwords in a way that can be easily uncovered. Anyone who discovers these passwords can log in through Telnet or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ltk3500sf #ltsecurity #CVE #infosec", "creation_timestamp": "2026-09-22T21:40:04.721202Z"}, {"uuid": "9d4f634d-1860-4070-bc14-ba161fd53fcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47116", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw5akyqmng22", "content": "\ud83d\udea8 CVE-2026-47116 \u2014 CVSS 9.3 CRITICAL\n\nLTSecurity LTK3500SF contains a hard-coded credentials vulnerability where root and guest account passwords...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-47116\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T22:10:21.391969Z"}]}